CNNVD-202507-1996 Information

CNNVD ID

CNNVD-202507-1996

CVE-2025-50107

  • CNNVD Published: 2025-07-15

Description (Chinese)

Oracle E-Business Suite是美国甲骨文(Oracle)公司的一套全面集成式的全球业务管理软件。该软件提供了客户关系管理、服务管理、财务管理等功能。 Oracle E-Business Suite的Oracle Universal Work Queue 12.2.5至12.2.14版本存在安全漏洞,该漏洞源于请求处理组件存在缺陷,可能导致部分数据被未授权访问或修改。

Description (English)

Oracle E-Business Suite is a fully integrated global business management software package for Oracle. The software provides functions such as customer relationship management, service management and financial management. Versions Oracle Universal World Queue 12.2.5 to 12.2.14 of Oracle E-Business Suite contain a security loophole, which stems from deficiencies in the requested processing component and may lead to unauthorized access to or modification of some data.

Hazard Level

High

Vulnerability Type

访问控制错误

Affected Vendor

OrangeHRM

Published

2025-07-15

Last Modified

2026-02-24

References

https://www.oracle.com/security-alerts/cpujul2025.html https://nvd.nist.gov/vuln/detail/CVE-2025-50107

Patch

https://www.oracle.com/security-alerts/cpujul2025.html

Share on: