Oracle Family July 2025 Security Update Advisory
Overview
Oracle(https://www.oracle.com) has released a security update that addresses a vulnerability in its supplied products. Users of affected systems are advised to update to the latest version.
Affected Products
[Oracle BI Publisher product family]
Oracle BI Publisher 12.2.1.4.0 Versions
Oracle BI Publisher 7.6.0.0.0.0 Version
Oracle BI Publisher 8.2.0.0.0.0 version
[Oracle Business Intelligence Enterprise Edition product family] Oracle Business Intelligence Enterprise Edition 12.0.0.0.0
Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 Version
Oracle Business Intelligence Enterprise Edition 7.6.0.0.0.0 Version
Oracle Business Intelligence Enterprise Edition 8.2.0.0.0.0 Version
[Oracle Application Express product family]
Oracle Application Express 24.2.4 Version
Oracle Application Express 24.2.5 Version
[Autonomous Health Framework product family]
Autonomous Health Framework versions 24.11.0-25.4.0
[Oracle Blockchain Platform product family]
Oracle Blockchain Platform 21.4.3 version
Oracle Blockchain Platform 24.1.3 version
[Oracle Commerce Guided Search family] Oracle Commerce Guided Search 11.4.0 version
Oracle Commerce Guided Search 11.4.0 version
[Oracle Commerce Guided Search Platform Services product family]
Oracle Commerce Guided Search Platform Services version 11.4.0
[Oracle Communications Cloud Native Core Automated Test Suite product family] Oracle Communications Cloud Native Core Automated Test Suite product family
Oracle Communications Cloud Native Core Automated Test Suite version 24.2.4 [Oracle Communications Cloud Native Core Automated Test Suite family
[Oracle Communications Cloud Native Core Binding Support Function Suite] Oracle Communications Cloud Native Core Automated Test Suite 24.2.4 version
Oracle Communications Cloud Native Core Binding Support Function 24.2.0-24.2.3 Versions
[Oracle Communications Cloud Native Core Console Family] [Oracle Communications Cloud Native Core Console Family]
Oracle Communications Cloud Native Core Console Version 24.2.4 [Oracle Communications Cloud Native Core Console Family
[Oracle Communications Cloud Native Core DBTier product family] Oracle Communications Cloud Native Core DBTier product family
Oracle Communications Cloud Native Core DBTier Version 24.2.5 [Oracle Communications Cloud Native Core DBTier Family
Oracle Communications Cloud Native Core DBTier 24.3.0 Version
Oracle Communications Cloud Native Core DBTier 25.1.100 Version
[Oracle Communications Cloud Native Core Network Data Analytics Function Suite]
Oracle Communications Cloud Native Core Network Data Analytics Function 22.4.0 Version
Oracle Communications Cloud Native Core Network Data Analytics Function 23.1.0 Version
Oracle Communications Cloud Native Core Network Data Analytics Function 23.4.3 Version
[Oracle Communications Cloud Native Core Network Exposure Function Suite]
Oracle Communications Cloud Native Core Network Exposure Function 24.2.0 Version
[Oracle Communications Cloud Native Core Network Function Cloud Native Environment Suite] [Oracle Communications Cloud Native Core Network Function Cloud Native Environment Suite] [Oracle Communications Cloud Native Core Network Function Cloud Native Environment Suite
Oracle Communications Cloud Native Core Network Function Cloud Native Environment 25.1.100 Version
[Oracle Communications Cloud Native Core Network Repository Function Cloud Native Environment Suite] Oracle Communications Cloud Native Core Network Function Cloud Native Environment 25.1.100 version
Oracle Communications Cloud Native Core Network Repository Function Version 24.2.4 [Oracle Communications Cloud Native Core Network Repository Function Family
[Oracle Communications Cloud Native Core Network Slice Selection Function Family] Oracle Communications Cloud Native Core Network Slice Selection Function Family
Oracle Communications Cloud Native Core Network Slice Selection Function Version 24.3.1 [Oracle Communications Cloud Native Core Network Slice Selection Function Family
[Oracle Communications Cloud Native Core Policy Family] Oracle Communications Cloud Native Core Policy Suite
Oracle Communications Cloud Native Core Policy versions 24.2.0-24.2.6 [Oracle Communications Cloud Native Core Policy family
[Oracle Communications Cloud Native Core Security Edge Protection Proxy family] Oracle Communications Cloud Native Core Security Edge Protection Proxy family
Oracle Communications Cloud Native Core Security Edge Protection Proxy version 24.2.4
Oracle Communications Cloud Native Core Security Edge Protection Proxy 25.1.100 Version
Oracle Communications Cloud Native Core Security Edge Protection Proxy 25.1.101 version
[Oracle Communications Cloud Native Core Service Communication Proxy family] [Oracle Communications Cloud Native Core Service Communication Proxy family]
Oracle Communications Cloud Native Core Service Communication Proxy 24.2.0 version
Oracle Communications Cloud Native Core Service Communication Proxy 25.1.100 version
[Oracle Communications Core Session Manager family] Oracle Communications Core Session Manager 9.0.0 version
Oracle Communications Core Session Manager 9.1.5 version
[Oracle Communications Element Manager product family]
Oracle Communications Element Manager 9.0.0-9.0.4 Versions
[Oracle Communications Network Analytics Data Director product family] Oracle Communications Network Analytics Data Director 24.2.1.1
Oracle Communications Network Analytics Data Director 24.2.0 Version
Oracle Communications Network Analytics Data Director 24.3.0 version
Oracle Communications Network Analytics Data Director 25.1.100 Version
[Oracle Communications Operations Monitor family] Oracle Communications Operations Monitor 5.1.0 version
Oracle Communications Operations Monitor 5.1 version
Oracle Communications Operations Monitor 5.2 version
[Oracle Communications Policy Management product family]
Oracle Communications Policy Management 15.0.0.0 version
[Oracle Communications Session Border Controller family] Oracle Communications Session Border Controller 10.0.0 version
Oracle Communications Session Border Controller 10.0.0 Version
Oracle Communications Session Border Controller 9.2.0 Version
Oracle Communications Session Border Controller 9.3.0 Version
[Oracle Communications Session Report Manager family] Oracle Communications Session Report Manager 9.2.0 version
Oracle Communications Session Report Manager 9.0.0 through 9.0.4 versions
[Oracle Communications User Data Repository family] Oracle Communications Session Report Manager 9.0.0-9.0.4 versions
Oracle Communications User Data Repository version 15.0.3 [Oracle Communications User Data Repository family
[Oracle Enterprise Communications Broker product family] Oracle Communications User Data Repository 15.0.3 version
Oracle Enterprise Communications Broker 4.1.0 Version
Oracle Enterprise Communications Broker 4.2.0 Version
Oracle Enterprise Communications Broker 5.0.0 Version
[Oracle Communications BRM – Elastic Charging Engine product family] Oracle Communications BRM – Elastic Charging Engine product family
Oracle Communications BRM – Elastic Charging Engine 12.0.0.4-12.0.0.8 Versions
Oracle Communications BRM – Elastic Charging Engine 15.0.0.0 Versions
Oracle Communications BRM – Elastic Charging Engine 15.0.1.0 version
Oracle Communications BRM – Elastic Charging Engine 15.1.0.0 version
[Oracle Communications Billing and Revenue Management Suite]
Oracle Communications Billing and Revenue Management 12.0.0.4.0-12.0.0.8.0 Versions
Oracle Communications Billing and Revenue Management 15.0.0.0.0.0 Versions
Oracle Communications Billing and Revenue Management 15.0.1.0.0.0 version
Oracle Communications Billing and Revenue Management 15.1.0.0.0.0 version
[Oracle Communications Calendar Server product family]
Oracle Communications Calendar Server 8.0.0.8.0 Version
[Oracle Communications Contacts Server product family]
Oracle Communications Contacts Server 8.0.0.9.0 Version
[Oracle Communications Convergence product family] [Oracle Communications Convergence product family]
Oracle Communications Convergence 3.0.3.3.0 Version
Oracle Communications Convergence 3.0.3.4.0 version
[Oracle Communications Convergent Charging Controller product family]
Oracle Communications Convergent Charging Controller 12.0.3.0.0-12.0.6.0.0 Versions
Oracle Communications Convergent Charging Controller 15.0.0.0.0-15.0.1.0.0 versions
Oracle Communications Convergent Charging Controller 15.1.0.0.0.0 version
[Oracle Communications IP Service Activator family] Oracle Communications IP Service Activator 7.0.0.0.0
Oracle Communications IP Service Activator 7.4.0 Version
Oracle Communications IP Service Activator 7.5.0 version
[Oracle Communications MetaSolv Solution family] Oracle Communications IP Service Activator 7.5.0 version
Oracle Communications MetaSolv Solution 6.3.1 Version
[Oracle Communications Network Charging and Control product family] Oracle Communications Network Charging and Control 12.0.1 version
Oracle Communications Network Charging and Control 12.0.3.0.0-12.0.6.0.0 Versions
Oracle Communications Network Charging and Control 15.0.0.0.0.0-15.0.1.0.0 Versions
Oracle Communications Network Charging and Control 15.1.0.0.0.0 version
[Oracle Communications Network Integrity product family]
Oracle Communications Network Integrity 7.3.6 Version
Oracle Communications Network Integrity 7.4.0 Version
Oracle Communications Network Integrity 7.5.0 Version
[Oracle Communications Offline Mediation Controller product family]
Oracle Communications Offline Mediation Controller 12.0.0.2-12.0.0.8 Versions
Oracle Communications Offline Mediation Controller 15.0.0.0 version
Oracle Communications Offline Mediation Controller 15.0.0.0-15.0.1.0 Versions
Oracle Communications Offline Mediation Controller 15.0.1.0 version
[Oracle Communications Order and Service Management product family] Oracle Communications Order and Service Management 7.0.1.0
Oracle Communications Order and Service Management 7.4.0 Version
Oracle Communications Order and Service Management 7.4.1 Version
Oracle Communications Order and Service Management 7.5.0 version
[Oracle Communications Unified Assurance product family] Oracle Communications Unified Assurance 6.0.1 version
Oracle Communications Unified Assurance 6.0.5 Version
Oracle Communications Unified Assurance 6.0.5 to 6.1.0 Versions
[Oracle Communications Unified Inventory Management product family]
Oracle Communications Unified Inventory Management 7.4.0-7.4.2 Versions
Oracle Communications Unified Inventory Management 7.5.0 Versions
Oracle Communications Unified Inventory Management 7.5.1 Versions
Oracle Communications Unified Inventory Management 7.6.0-7.8.0 Versions
[Primavera P6 Enterprise Project Portfolio Management product family]
Primavera P6 Enterprise Project Portfolio Management 20.12.0-20.12.21 Versions
Primavera P6 Enterprise Project Portfolio Management 21.12.0-21.12.21 Versions
Primavera P6 Enterprise Project Portfolio Management 22.12.0-22.12.19 Versions
Primavera P6 Enterprise Project Portfolio Management 23.12.0-23.12.13 Versions
Primavera P6 Enterprise Project Portfolio Management 24.12.0-24.12.4 Versions
[Primavera Unifier product family]
Primavera Unifier 20.12.0-20.12.16 Versions
Primavera Unifier 21.12.0-21.12.17 Versions
Primavera Unifier 22.12.0-22.12.15 Versions
Primavera Unifier 23.12.0-23.12.14 Versions
Primavera Unifier 24.12.0-24.12.6 Versions
[JDBC Suite]
JDBC versions 23.4-23.8
[Oracle Database Server product family]
Oracle Database Server 19.3-19.27 Versions
Oracle Database Server 21.3-21.18 Versions
Oracle Database Server 21.4-21.18 Versions
Oracle Database Server 23.4-23.8 Versions
[Oracle Text product family]
Oracle Text 19.3-19.27 Versions
Oracle Text 21.3-21.18 Versions
Oracle Text 23.4-23.8 Versions
[Oracle Applications Framework product family]
Oracle Applications Framework 12.2.3-12.2.14 versions
[Oracle CRM Technical Foundation product family] Oracle CRM Technical Foundation 12.2.3-12.2.14 versions
Oracle CRM Technical Foundation 12.2.11-12.2.13 versions
[Oracle Lease and Finance Management Suite] Oracle Lease and Finance Management 12.2.11-12.2.13 versions
Oracle Lease and Finance Management 12.2.13 Version
[Oracle MES for Process Manufacturing Suite] Oracle MES for Process Manufacturing 12.2.13 version
Oracle MES for Process Manufacturing 12.2.12-12.2.13 Versions
[Oracle Mobile Field Service Suite]
Oracle Mobile Field Service 12.2.3-12.2.13 Versions
[Oracle Universal Work Queue family] Oracle Universal Work Queue 12.2.3-12.2.13 versions
Oracle Universal Work Queue 12.2.3-12.2.14 Versions
Oracle Universal Work Queue 12.2.5-12.2.14 Versions
[Oracle iStore Product Family]
Oracle iStore 12.2.3-12.2.14 Versions
[Oracle Application Testing Suite product family]
Oracle Application Testing Suite 13.3.0.1 version
[Oracle Essbase product family]
Oracle Essbase 21.7.2.0.0.0 version
[Oracle Banking Origination product family] Oracle Banking Origination 14.4.0.0.0
Oracle Banking Origination 14.4.0.0.0.0-14.7.0.0.0 Versions
[Oracle Financial Services Analytical Applications Infrastructure product family] Oracle Banking Origination 14.4.0.0.0-14.7.0.0.0
Oracle Financial Services Analytical Applications Infrastructure 8.0.7.8 Version
Oracle Financial Services Analytical Applications Infrastructure 8.0.8.5 Version
Oracle Financial Services Analytical Applications Infrastructure 8.0.8.6 Version
Oracle Financial Services Analytical Applications Infrastructure 8.1.1.4 version
Oracle Financial Services Analytical Applications Infrastructure 8.1.2.5 Version
[Oracle Financial Services Behavior Detection Platform product family]
Oracle Financial Services Behavior Detection Platform 8.0.8.1 Version
Oracle Financial Services Behavior Detection Platform 8.1.2.8 Version
Oracle Financial Services Behavior Detection Platform 8.1.2.9 Version
[Oracle Financial Services Model Management and Governance Suite] Oracle Financial Services Behavior Detection Platform 8.1.2.9 version
Oracle Financial Services Model Management and Governance 8.1.2.7 Version
[Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition product family] Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition product family
Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition 8.0.8 Version
[Oracle Business Process Management Suite family] Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition 8.0.8 version
Oracle Business Process Management Suite 12.2.1.4.0 Version
Oracle Business Process Management Suite 14.1.2.0.0.0 version
[Oracle Coherence product family]
Oracle Coherence 12.2.1.4.0 Version
Oracle Coherence 14.1.1.0.0.0 version
Oracle Coherence 14.1.2.0.0.0 Version
[Oracle Data Integrator product family]
Oracle Data Integrator 12.2.1.4.0 Version
Oracle Data Integrator 14.1.2.0.0.0 Version
[Oracle Enterprise Data Quality product family]
Oracle Enterprise Data Quality 12.2.1.4.0 Version
Oracle Enterprise Data Quality 14.1.2.0.0.0 Version
[Oracle Fusion Middleware family] Oracle Fusion Middleware 14.1.2.0.0
Oracle Fusion Middleware 14.1.2.0.0.0 Version
[Oracle HTTP Server product family]
Oracle HTTP Server 12.2.1.4.0 Version
Oracle HTTP Server 14.1.2.0.0.0 Version
[Oracle Identity Manager product family]
Oracle Identity Manager 12.2.1.4.0 Version
[Oracle JDeveloper product family] Oracle JDeveloper 14.1.2.0.0
Oracle JDeveloper 14.1.2.0.0.0 Version
[Oracle Managed File Transfer product family] Oracle Managed File Transfer 12.2.2.0.0
Oracle Managed File Transfer 12.2.1.4.0 Version
[Oracle Middleware Common Libraries and Tools product family] Oracle Managed File Transfer 12.2.1.4.0 version
Oracle Middleware Common Libraries and Tools 12.2.1.4.0 Version
Oracle Middleware Common Libraries and Tools 14.1.2.0.0 Version
[Oracle Outside In Technology product family]
Oracle Outside In Technology 8.5.7 version
[Oracle Service Bus product family]
Oracle Service Bus 12.2.1.4.0 Version
[Oracle WebCenter Enterprise Capture product family] Oracle WebCenter Enterprise Capture 12.2.1.4.0 version
Oracle WebCenter Enterprise Capture 12.2.1.4.0 Version
[Oracle WebCenter Portal Suite] Oracle WebCenter Portal 12.2.1.4.0 Version
Oracle WebCenter Portal 12.2.1.4.0 Version
[Oracle WebLogic Server Family] Oracle WebLogic Server 12.2.1.4.0
Oracle WebLogic Server 12.2.1.4.0 Version
Oracle WebLogic Server 14.1.1.0.0 Version
Oracle WebLogic Server 14.1.2.0.0 Version
[Oracle GoldenGate Big Data and Application Adapters Suite] [Oracle GoldenGate Big Data and Application Adapters Suite]
Oracle GoldenGate Big Data and Application Adapters 21.3-21.17 Version
Oracle GoldenGate Big Data and Application Adapters 23.4-23.6 Versions
Oracle GoldenGate Big Data and Application Adapters 23.4-23.7 Versions
[Oracle GoldenGate Stream Analytics Suite] [Oracle GoldenGate Stream Analytics Suite]
Oracle GoldenGate Stream Analytics 19.1.0.0.0.0-19.1.0.0.11 Versions
[Oracle GoldenGate Studio family] Oracle GoldenGate Stream Analytics 19.1.0.0.0-19.1.0.0.11 versions
Oracle GoldenGate Studio 12.2.0.4.0 Versions
[Oracle GoldenGate Veridata Product Family]
Oracle GoldenGate Veridata 12.2.1.4.0-12.2.1.4.250331 Versions
[Graph Server and Client product family]
Graph Server and Client 24.4.1 version
Graph Server and Client 25.1.0 version
[Oracle Healthcare Master Person Index product family] Oracle Healthcare Master Person Index 5.0.0.0-5.0.9.2 versions
Oracle Healthcare Master Person Index 5.0.0.0-5.0.9.2 Versions
[Oracle Hospitality Cruise Shipboard Property Management System product family] Oracle Hospitality Cruise Shipboard Property Management System product family
Oracle Hospitality Cruise Shipboard Property Management System 23.1.4 Version
Oracle Hospitality Cruise Shipboard Property Management System 23.2.2 Version
[Oracle Hyperion Financial Reporting family] Oracle Hospitality Cruise Shipboard Property Management System 23.2.2 version
Oracle Hyperion Financial Reporting 11.2.20.0.000 Version
[Oracle Hyperion Infrastructure Technology product family] Oracle Hyperion Financial Reporting 11.2.20.0.000 version
Oracle Hyperion Infrastructure Technology 11.2.21.0.000 Version
[Oracle Insurance Policy Administration J2EE Family] Oracle Insurance Policy Administration J2EE Family
Oracle Insurance Policy Administration J2EE 11.3.0-11.3.2 Versions
Oracle Insurance Policy Administration J2EE 11.3.0-12.0.4 Versions
Oracle Insurance Policy Administration J2EE 12.0.4 Versions
[JD Edwards EnterpriseOne Tools product family]
JD Edwards EnterpriseOne Tools 9.2.0.0-9.2.9.3 versions
[JD Edwards World Security product family]
JD Edwards World Security A9.4 version
[Oracle GraalVM Enterprise Edition product family]
Oracle GraalVM Enterprise Edition 21.3.14 version
[Oracle GraalVM for JDK product family] Oracle GraalVM for JDK 17.0.15 version
Oracle GraalVM for JDK 17.0.15 Version
Oracle GraalVM for JDK 21.0.7 Version
Oracle GraalVM for JDK 24.0.1 Version
[Oracle Java SE Family]
Oracle Java SE 11.0.27 version
Oracle Java SE 17.0.15 Version
Oracle Java SE 21.0.7 Version
Oracle Java SE 24.0.1 Versions
Oracle Java SE 8u451 Versions
Oracle Java SE 8u451-b50 Versions
Oracle Java SE 8u451-perf Versions
[MySQL Client family]
MySQL Client 8.0.0-8.0.42 versions
MySQL Client 8.4.0-8.4.5 versions
MySQL Client 9.0.0-9.3.0 versions
[MySQL Cluster product family]
MySQL Cluster 7.6.0-7.6.34 Versions
MySQL Cluster 8.0.0-8.0.41 Versions
MySQL Cluster 8.0.0-8.0.42 Versions
MySQL Cluster 8.4.0-8.4.4 Versions
MySQL Cluster 8.4.0-8.4.5 Versions
MySQL Cluster 9.0.0-9.2.0 Versions
MySQL Cluster 9.0.0-9.3.0 Versions
[MySQL Enterprise Backup family] [MySQL Enterprise Backup
MySQL Enterprise Backup 8.0.0-8.0.42 Versions
MySQL Enterprise Backup 8.4.0-8.4.5 Versions
MySQL Enterprise Backup 9.0.0-9.3.0 Versions
[MySQL Server Family]
MySQL Server 8.0.0-8.0.25 Versions
MySQL Server 8.0.0-8.0.41 Versions
MySQL Server 8.0.0-8.0.42 Versions
MySQL Server 8.0.42 Versions
MySQL Server 8.4.0-8.4.4 Versions
MySQL Server 8.4.0-8.4.5 Versions
MySQL Server 8.4.5 Versions
MySQL Server 9.0.0-9.1.0 Versions
MySQL Server 9.0.0-9.2.0 Versions
MySQL Server 9.0.0-9.3.0 Versions
MySQL Server 9.3.0 Versions
[MySQL Workbench family] MySQL Workbench 8.0.0 through 9.3.0
MySQL Workbench 8.0.0-8.0.42 Versions
[Oracle NoSQL Database product family] Oracle NoSQL Database 22.3.51 version
Oracle NoSQL Database 22.3.51 Version
Oracle NoSQL Database 23.1.38 Version
Oracle NoSQL Database 24.4.9 Version
[PeopleSoft Enterprise HCM Global Payroll Core product family]
PeopleSoft Enterprise HCM Global Payroll Core 9.2.51 version
PeopleSoft Enterprise HCM Global Payroll Core 9.2.52 version
[PeopleSoft Enterprise HCM Human Resources product family]
PeopleSoft Enterprise HCM Human Resources 9.2 version
[PeopleSoft Enterprise PeopleTools product family]
PeopleSoft Enterprise PeopleTools 8.60 Version
PeopleSoft Enterprise PeopleTools 8.61 Version
PeopleSoft Enterprise PeopleTools 8.62 version
[Oracle REST Data Services product family] Oracle REST Data Services 24.1.1
Oracle REST Data Services 24.2.0 version
Oracle REST Data Services 24.4 version
Oracle REST Data Services 25.1.0 version
[Oracle Retail EFTLink Suite] Oracle Retail EFTLink 20.1.0 version
Oracle Retail EFTLink 20.0.1 Version
Oracle Retail EFTLink 21.0.0 version
Oracle Retail EFTLink 22.0.0 Version
Oracle Retail EFTLink 23.0.0 version
[Oracle Retail Extract Tranform and Load product family] [Oracle Retail Extract Tranform and Load product family]
Oracle Retail Extract Tranform and Load 13.2.5 version
[Oracle Retail Integration Bus product family] Oracle Retail Integration Bus 14.1.3
Oracle Retail Integration Bus 14.1.3.2 Version
Oracle Retail Integration Bus 15.0.3.1 version
Oracle Retail Integration Bus 16.0.3 version
Oracle Retail Integration Bus 19.0.1 version
[Oracle Retail Predictive Application Server product family]
Oracle Retail Predictive Application Server 15.0.3 version
Oracle Retail Predictive Application Server 16.0.3 Version
[Oracle Retail Service Backbone family] Oracle Retail Service Backbone 14.0.3 version
Oracle Retail Service Backbone 14.1.3.2 Version
Oracle Retail Service Backbone 15.0.3.1 version
Oracle Retail Service Backbone 16.0.3 Version
Oracle Retail Service Backbone 19.0.1 version
[Oracle Retail Xstore Office Suite] Oracle Retail Xstore Office 20.0.1 version
Oracle Retail Xstore Office 20.0.5 Version
Oracle Retail Xstore Office 21.0.4 version
Oracle Retail Xstore Office 22.0.2 Version
Oracle Retail Xstore Office 23.0.2 Version
Oracle Retail Xstore Office 24.0.1 version
[Oracle Retail Xstore Point of Service Suite] [Oracle Retail Xstore Point of Service Family]
Oracle Retail Xstore Point of Service 20.0.5 Version
Oracle Retail Xstore Point of Service 21.0.4 Version
Oracle Retail Xstore Point of Service 22.0.2 Version
Oracle Retail Xstore Point of Service 23.0.2 Version
Oracle Retail Xstore Point of Service 24.0.1 version
[Siebel CRM Deployment product family]
Siebel CRM Deployment 25.0-25.5 Versions
[Siebel CRM End User product family] [Siebel CRM End User product family]
Siebel CRM End User versions 25.0-25.5
[Siebel CRM Integration product family] [Siebel CRM Integration product family]
Siebel CRM Integration versions 25.0-25.5
[Oracle Spatial Studio product family] [Oracle Spatial Studio product family]
Oracle Spatial Studio version 24.1.0
[Oracle Agile Engineering Data Management Suite] Oracle Spatial Studio 24.1.0 version
Oracle Agile Engineering Data Management 6.2.1 version
[Oracle Agile PLM Suite] Oracle Agile PLM 9.3.6 version
Oracle Agile PLM 9.3.6 version
[Oracle AutoVue product family]
Oracle AutoVue 21.0.2 Version
Oracle AutoVue 21.1.0 Version
[Oracle Product Lifecycle Analytics family] Oracle Product Lifecycle Analytics 3.6.1 version
Oracle Product Lifecycle Analytics 3.6.1 version
[Oracle TimesTen In-Memory Database product family]
Oracle TimesTen In-Memory Database 18.1.4.52.0 Version
Oracle TimesTen In-Memory Database 22.1.1.32.0 Version
[Oracle Utilities Application Framework Family] Oracle Utilities Application Framework 24.1.1.32.0
Oracle Utilities Application Framework 24.1.0.0.0.0-24.3.0.0.0.0 Versions
Oracle Utilities Application Framework 25.4 version
Oracle Utilities Application Framework 4.3.0.6.0 Versions
Oracle Utilities Application Framework 4.4.0.0.0.0 version
Oracle Utilities Application Framework 4.4.0.2.0 Version
Oracle Utilities Application Framework 4.4.0.3.0 version
Oracle Utilities Application Framework 4.5.0.0.0.0 Version
Oracle Utilities Application Framework 4.5.0.1.1 Version
Oracle Utilities Application Framework 4.5.0.1.3 Version
[Oracle Utilities Network Management System product family]
Oracle Utilities Network Management System 2.4.0.1.27 Version
Oracle Utilities Network Management System 2.5.0.1.15 Version
Oracle Utilities Network Management System 2.5.0.2.8 Version
Oracle Utilities Network Management System 2.5.0.2.9 Version
Oracle Utilities Network Management System 2.6.0.1.7 Version
Oracle Utilities Network Management System 2.6.0.2.1 Version
Oracle Utilities Network Management System 2.6.0.2.2 Version
[Oracle Utilities Testing Accelerator Suite] [Oracle Utilities Testing Accelerator Suite]
Oracle Utilities Testing Accelerator 7.0.0.0.0.0 Version
Oracle Utilities Testing Accelerator 7.0.0.1.0 Version
[Oracle VM VirtualBox Family]
Oracle VM VirtualBox 7.1.10 Version
Resolved Vulnerabilities
Oracle has released a security update that resolves 309 vulnerabilities. The list of major vulnerabilities is as follows
Severe network accessibility vulnerability for unauthenticated users in Oracle Agile Engineering Data Management, Oracle Retail Xstore Office, Oracle Managed File Transfer, and Oracle Agile PLM (CVE-2025-31650 and 2 others, CVSS 9.8)
Critical data accessibility vulnerability in Oracle BI Publisher for high-level unauthorized users (CVE-2025-50060, CVSS 8.1)
A high-level denial-of-service vulnerability in Oracle BI Publisher (CVE-2025-23184, CVSS 7.5)
High-level Denial of Service Vulnerability in Oracle Banking Origination, Oracle Communications Cloud Native Core Network Exposure Function, Oracle Retail Xstore Point of Service, and PeopleSoft Enterprise PeopleTools (CVE-2025-25193, CVSS 7.5)
High-level unauthenticated attacker with logon to the infrastructure where Oracle Communications Cloud Native Core Console executes possible vulnerability in Oracle Communications Cloud Native Core Console (CVE-2025-4802, CVSS 7.8)
High level denial of service vulnerability in Oracle Communications Cloud Native Core Network Exposure Function, Oracle Banking Origination, Oracle Communications Cloud Native Core Network Slice Selection Function, PeopleSoft Enterprise PeopleTools, Oracle Retail Xstore Point of Service (CVE-2025-24970, CVSS 7.5)
High-level, high-privilege user system logon vulnerability in Oracle Communications Core Session Manager, Oracle Communications Session Border Controller, and Oracle Enterprise Communications Broker (CVE-2025-23016, CVSS 8.2)
High-level, potentially denial-of-service vulnerability in Oracle Communications Policy Management, Oracle Utilities Testing Accelerator (CVE-2025-49124, CVSS 7.5)
High-level, high-privileged user network access vulnerability in Oracle Communications Unified Assurance (CVE-2025-1974, CVSS 7.2)
Critical data accessibility vulnerability in Oracle Data Integrator, Oracle Middleware Common Libraries and Tools by high-level, unauthorized users (CVE-2025-27553, CVSS 7.5)
Critical data accessibility vulnerability in Oracle Data Integrator for high-level unauthorized users (CVE-2025-30474, CVSS 7.5)
Critical data accessibility vulnerability in Oracle Enterprise Data Quality for high-level unauthorized users (CVE-2025-27819 and two others, CVSS 7.5)
Critical data accessibility vulnerability in Oracle Financial Services Behavior Detection Platform, Oracle Enterprise Data Quality, Oracle Financial Services Analytical Applications Infrastructure, Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition, and Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition (CVE-2025-27817 and two others, CVSS 7.5)
High-level, unauthorized user critical data accessibility vulnerability in Oracle GoldenGate Big Data and Application Adapters (CVE-2025-27820, CVSS 7.5)
High-level denial-of-service vulnerability in Oracle GraalVM for JDK (CVE-2025-23165 and two others, CVSS 7.5)
High-level unauthorized user critical data access vulnerability in Oracle HTTP Server, Oracle Communications Cloud Native Core Network Repository Function (CVE-2025-27113, CVSS 7.8)
Critical data accessibility vulnerability in Oracle Java SE, Oracle GraalVM for JDK by high-level unauthorized users (CVE-2025-50059, CVSS 8.6)
Critical data accessibility vulnerability in Oracle Lease and Finance Management for high-level unauthorized users (CVE-2025-30743, CVSS 8.1)
Critical data accessibility vulnerability in Oracle Mobile Field Service for high-level unauthorized users (CVE-2025-30744, CVSS 8.1)
Critical data accessibility vulnerability in Oracle Universal Work Queue for high-level unauthorized users (CVE-2025-50105, CVSS 8.1)
High-level, highly privileged user system logon vulnerability in Oracle VM VirtualBox (CVE-2025-53024 and 3 others, CVSS 8.2)
Oracle WebLogic Server, Oracle Communications Element Manager, Oracle Communications Convergence, Oracle Retail Service Backbone, Oracle Retail Xstore Point of Service, Oracle Communications Cloud Native Core Network Exposure Function, Oracle Data Integrator, Oracle Financial Services Model Management and Governance, Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition, Oracle Communications MetaSolv Solution, Oracle Communications Network Integrity, Oracle Business Intelligence Enterprise Edition, Oracle Communications Cloud Native Core Service Communication Proxy, Oracle Communications BRM – Elastic Charging Engine, Oracle Service Bus, Oracle Middleware Common Libraries and Tools, Primavera Unifier, Oracle Identity Manager, Oracle Healthcare Master Person Index, Oracle Communications Order and Service Management, Oracle Retail Integration Bus, Oracle WebCenter Portal, Oracle Communications Cloud Native Core Network Slice Selection Function, A network accessibility vulnerability exists in Oracle Application Testing Suite, Oracle Financial Services Behavior Detection Platform, Oracle Financial Services Analytical Applications Infrastructure, Oracle Communications Unified Inventory Management that allows a high-level, low-privileged user to gain network access (CVE-2025-48734, CVSS 8.8)
Key data accessibility vulnerability in Oracle WebLogic Server for high-level, unauthorized users (CVE-2025-30762, CVSS 7.5)
Vulnerability Patches
Product-specific Vulnerability Patches were made available in the July 15, 2025 update. For more information on Vulnerability Patches, please see the Referenced Sites documentation.
Referenced Sites
[1] Critical Patch Update – July 2025