Summary
| Vulnerability Name | Oracle E-Business Suite Remote Code Execution (CVE-2025-30727) |
|---|---|
| Released on | April 16, 2025 |
| Affected Component | Oracle E-Business Suite |
| Affected Version | 12.2.3 ≤ Oracle E-Business Suite ≤ 12.2.14 |
| Vulnerability Type | Remote code execution |
| Exploitation Condition |
|
| Impact | Exploitation difficulty: easy. Attackers can exploit this vulnerability to execute arbitrary code without authorization. Severity: critical. This vulnerability can result in remote code execution. |
| Official Solution | Available |
About the Vulnerability
Component Introduction
Oracle E-Business Suite is Oracle's global business management software that integrates a comprehensive suite of business applications. The software provides a variety of features, such as customer relationship management, service management, and financial management.
Vulnerability Description
On April 16, 2025, Sangfor FarSight Labs received notification of the remote code execution vulnerability in Oracle E-Business Suite (CVE-2025-30727), classified as critical in threat level.
Specifically, a critical vulnerability exists in the iSurvey module of Oracle E-Business Suite. Unauthorized attackers can exploit this vulnerability to construct malicious HTTP requests to execute arbitrary code, leading to server compromises.
Affected Versions
The following versions of Oracle E-Business Suite are affected:
12.2.3 ≤ Oracle E-Business Suite ≤ 12.2.14
Solutions
Remediation Solutions
Official Solution
Security patches have been officially released to fix the vulnerability. Affected users are advised to download and install the corresponding patches at the earliest opportunity.
Download link: https://support.oracle.com/
Timeline
On April 16, 2025, Sangfor FarSight Labs received notification of the remote code execution vulnerability in Oracle E-Business Suite (CVE-2025-30727).
On April 16, 2025, Sangfor FarSight Labs released a vulnerability alert.
References
https://www.oracle.com/security-alerts/cpuapr2025.html
Learn More
Sangfor FarSight Labs researches the latest cyber threats and unknown zero-day vulnerabilities, alerting customers to potential dangers to their organizations, and providing real-time solutions with actionable intelligence. Sangfor FarSight Labs works with other security vendors and the security community at large to identify and verify global cyber threats, providing fast and easy protection for customers.
