Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Oracle Database Server Incorrect Authorization Vulnerability - CVE-2025-30751 - Vulnerability Database
Oracle Database Server

Oracle Database Server Incorrect Authorization Vulnerability - CVE-2025-30751

High
Reference: CVE-2025-30751
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2025-30751
Title: Oracle Database Server Incorrect Authorization Vulnerability
Overview:

Vulnerability in the Oracle Database component of Oracle Database Server. Supported versions that are affected are 19.27 and 23.4-23.8. Easily exploitable vulnerability allows low privileged attacker having Create Session Create Procedure privilege with network access via Oracle Net to compromise Oracle Database. Successful attacks of this vulnerability can result in takeover of Oracle Database. CVSS 3.1 Base Score 8.8 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).