Oracle Family October 2025 Security Update Advisory
Overview
Oracle(https://www.oracle.com) has released a security update that addresses a vulnerability in its supplied products. Users of affected systems are advised to update to the latest version.
Affected Products
[Oracle BI Publisher Product Family]
Oracle BI Publisher 7.6.0.0.0 and later versions
Oracle BI Publisher 8.2.0.0.0 version
[Oracle Business Intelligence Enterprise Edition product family] Oracle Business Intelligence Enterprise Edition 12.2.1.4.0
Oracle Business Intelligence Enterprise Edition 12.2.1.4.0 Version
Oracle Business Intelligence Enterprise Edition 7.6.0.0.0.0 Version
Oracle Business Intelligence Enterprise Edition 8.2.0.0.0.0 Version
[Oracle Commerce Guided Search product family] Oracle Commerce Guided Search 11.0.0.0.0
Oracle Commerce Guided Search 11.4.0 version
[Oracle Commerce Platform product family]
Oracle Commerce Platform 11.4.0 Version
[Management Cloud Engine Family]
Management Cloud Engine 25.1.0.0.0.0 version
[Oracle Communications Cloud Native Core Automated Test Suite product family] Oracle Communications Cloud Native Core Automated Test Suite 24.2.6 version
Oracle Communications Cloud Native Core Automated Test Suite 24.2.6 version
Oracle Communications Cloud Native Core Automated Test Suite 25.1.202 version
[Oracle Communications Cloud Native Core Binding Support Function Suite] Oracle Communications Cloud Native Core Binding Support Function Suite
Oracle Communications Cloud Native Core Binding Support Function 24.2.7-25.1.200 Versions
[Oracle Communications Cloud Native Core Certificate Management Suite] Oracle Communications Cloud Native Core Certificate Management Suite
Oracle Communications Cloud Native Core Certificate Management 25.1.200 Version
[Oracle Communications Cloud Native Core Console Suite] Oracle Communications Cloud Native Core Certificate Management 25.1.200 Version
Oracle Communications Cloud Native Core Console Version 24.2.5 [Oracle Communications Cloud Native Core Console Family
Oracle Communications Cloud Native Core Console 25.1.200 version
[Oracle Communications Cloud Native Core DBTier Family] Oracle Communications Cloud Native Core DBTier Family
Oracle Communications Cloud Native Core DBTier 25.1.200 version
[Oracle Communications Cloud Native Core Network Function Cloud Native Environment Suite] Oracle Communications Cloud Native Core Network Function Cloud Native Environment Suite
Oracle Communications Cloud Native Core Network Function Cloud Native Environment 25.1.100 Version
Oracle Communications Cloud Native Core Network Function Cloud Native Environment 25.1.200 version
[Oracle Communications Cloud Native Core Network Repository Function Family]
Oracle Communications Cloud Native Core Network Repository Function 24.2.5 Version
Oracle Communications Cloud Native Core Network Repository Function 25.1.202 Version
[Oracle Communications Cloud Native Core Network Slice Selection Function family]
Oracle Communications Cloud Native Core Network Slice Selection Function 25.1.100-25.1.200 Versions
Oracle Communications Cloud Native Core Network Slice Selection Function 25.1.200 version
[Oracle Communications Cloud Native Core Policy Suite] [Oracle Communications Cloud Native Core Policy Suite]
Oracle Communications Cloud Native Core Policy 24.2.7-25.1.200 Versions
[Oracle Communications Cloud Native Core Security Edge Protection Proxy Family] Oracle Communications Cloud Native Core Security Edge Protection Proxy Family
Oracle Communications Cloud Native Core Security Edge Protection Proxy 24.2.5 version
Oracle Communications Cloud Native Core Security Edge Protection Proxy 25.1.200 version
Oracle Communications Cloud Native Core Security Edge Protection Proxy 25.1.201 version
[Oracle Communications Cloud Native Core Service Communication Proxy family] [Oracle Communications Cloud Native Core Service Communication Proxy family]
Oracle Communications Cloud Native Core Service Communication Proxy 25.1.200 Version
Oracle Communications Cloud Native Core Service Communication Proxy 25.2.100 version
[Oracle Communications Cloud Native Core Unified Data Repository Suite] Oracle Communications Cloud Native Core Unified Data Repository Suite
Oracle Communications Cloud Native Core Unified Data Repository 25.1.100 version
Oracle Communications Cloud Native Core Unified Data Repository 25.1.200 version
[Oracle Communications Diameter Signaling Router family] Oracle Communications Diameter Signaling Router family
Oracle Communications Diameter Signaling Router 9.0.0.0.0.0 version
Oracle Communications Diameter Signaling Router 9.1.0.0.0.0 version
[Oracle Communications EAGLE Element Management System product family] Oracle Communications EAGLE Element Management System product family
Oracle Communications EAGLE Element Management System 46.6 Version
Oracle Communications EAGLE Element Management System 47.0 version
[Oracle Communications EAGLE LNP Application Processor product family]
Oracle Communications EAGLE LNP Application Processor 10.2.1.0 Version
Oracle Communications EAGLE LNP Application Processor 11.0.0.1-11.0.0.2 Versions
[Oracle Communications LSMS product family]
Oracle Communications LSMS 13.5.1.0 version
Oracle Communications LSMS 14.0.0.1 Version
Oracle Communications LSMS 14.0.0.2 Version
[Oracle Communications Network Analytics Data Director product family] Oracle Communications Network Analytics Data Director product family
Oracle Communications Network Analytics Data Director 24.2.0 Version
Oracle Communications Network Analytics Data Director 24.2.0-24.2.1 Versions
Oracle Communications Network Analytics Data Director 24.2.1 Versions
Oracle Communications Network Analytics Data Director 24.3.0 Version
Oracle Communications Network Analytics Data Director 25.1.100 version
Oracle Communications Network Analytics Data Director 25.1.200 version
[Oracle Communications Operations Monitor family] Oracle Communications Operations Monitor 5.1.0 version
Oracle Communications Operations Monitor 5.1 version
Oracle Communications Operations Monitor 5.2 version
Oracle Communications Operations Monitor 6.0 version
[Oracle Communications Session Border Controller family] Oracle Communications Session Border Controller 10.0 version
Oracle Communications Session Border Controller 10.0.0 Version
Oracle Communications Session Border Controller 4.1.0 Version
Oracle Communications Session Border Controller 9.0.0 Version
Oracle Communications Session Border Controller 9.2.0-9.3.0 Versions
Oracle Communications Session Border Controller 9.3.0 Version
[Oracle Enterprise Communications Broker product family] Oracle Enterprise Communications Broker 4.0.0 to 4.5.0
Oracle Enterprise Communications Broker 4.1.0 Version
Oracle Enterprise Communications Broker 4.1.0-4.2.0 Versions
Oracle Enterprise Communications Broker 4.2.0 Versions
Oracle Enterprise Communications Broker 5.0.0 Versions
[Oracle Enterprise Operations Monitor product family] Oracle Enterprise Operations Monitor 5.0.0 version
Oracle Enterprise Operations Monitor 5.1 Version
Oracle Enterprise Operations Monitor 5.2 version
Oracle Enterprise Operations Monitor 6.0 version
[Oracle Communications Billing and Revenue Management product family] Oracle Communications Billing and Revenue Management 12.0 version
Oracle Communications Billing and Revenue Management 12.0.0.4.0-15.0.1.0.0 version
[Oracle Communications Calendar Server product family]
Oracle Communications Calendar Server 8.0.0.7.0 Versions
Oracle Communications Calendar Server 8.0.0.8.0 Version
[Oracle Communications Contacts Server product family]
Oracle Communications Contacts Server 8.0.0.9.0 Version
[Oracle Communications Converged Charging System product family]
Oracle Communications Converged Charging System 2.0.0.0.0.0 Version
Oracle Communications Converged Charging System 2.0.0.0.0-2.0.0.1.0 Versions
Oracle Communications Converged Charging System 2.0.0.1.0 version
[Oracle Communications Convergence product family]
Oracle Communications Convergence 3.0.3.3.0 Version
Oracle Communications Convergence 3.0.3.4.0 Version
[Oracle Communications Convergent Charging Controller product family]
Oracle Communications Convergent Charging Controller 12.0.1.0.0-12.0.6.0.0 Versions
Oracle Communications Convergent Charging Controller 12.0.3.0.0-12.0.6.0.0 Versions
Oracle Communications Convergent Charging Controller 15.0.0.0.0-15.0.1.0.0 versions
Oracle Communications Convergent Charging Controller 15.1.0.0.0.0 version
[Oracle Communications Messaging Server family] [Oracle Communications Messaging Server product family]
Oracle Communications Messaging Server 8.1.0.28 version
[Oracle Communications Network Charging and Control product family] Oracle Communications Network Charging and Control product family
Oracle Communications Network Charging and Control 12.0.1.0.0-12.0.6.0.0 Versions
Oracle Communications Network Charging and Control 12.0.3.0.0-12.0.6.0.0 Versions
Oracle Communications Network Charging and Control 12.0.6.0.0 version
Oracle Communications Network Charging and Control 15.0.0.0.0.0-15.0.1.0.0 versions
Oracle Communications Network Charging and Control 15.1.0.0.0.0 version
[Oracle Communications Network Integrity product family]
Oracle Communications Network Integrity 7.3.6 Version
Oracle Communications Network Integrity 7.4.0 Version
Oracle Communications Network Integrity 7.5.0 Version
[Oracle Communications Offline Mediation Controller product family]
Oracle Communications Offline Mediation Controller 15.0.0.0.0.0 version
Oracle Communications Offline Mediation Controller 15.0.0.0.0.0-15.0.1.0.0 Versions
Oracle Communications Offline Mediation Controller 15.0.1.0.0 version
Oracle Communications Offline Mediation Controller 15.1.0.0.0.0 version
[Oracle Communications Order and Service Management family] Oracle Communications Order and Service Management 7.0.0.0.0
Oracle Communications Order and Service Management 7.4.0 Version
Oracle Communications Order and Service Management 7.4.1 Version
Oracle Communications Order and Service Management 7.5.0 Version
[Oracle Communications Pricing Design Center family] Oracle Communications Pricing Design Center 12.0.1 version
Oracle Communications Pricing Design Center 12.0.0.4.0-12.0.0.8.0 Versions
Oracle Communications Pricing Design Center 15.0.0.0.0.0-15.0.1.0.0 Versions
[Oracle Communications Service Catalog and Design Suite] Oracle Communications Service Catalog and Design 8.0.0.0-15.0.1.0.0 version
Oracle Communications Service Catalog and Design 8.0.0.5.0 Version
Oracle Communications Service Catalog and Design 8.1.0.4.0 Version
Oracle Communications Service Catalog and Design 8.2.0.1.0 Version
[Oracle Communications Unified Assurance product family]
Oracle Communications Unified Assurance 6.1.0-6.1.1 Versions
Oracle Communications Unified Assurance 6.1.1 version
[Oracle Communications Unified Inventory Management product family]
Oracle Communications Unified Inventory Management 7.5.0-7.5.1 Versions
Oracle Communications Unified Inventory Management 7.5.1 Version
Oracle Communications Unified Inventory Management 7.6.0 to 7.8.0 Versions
Oracle Communications Unified Inventory Management 7.7.0 Versions
Oracle Communications Unified Inventory Management 7.7.0 to 7.8.0 Versions
Oracle Communications Unified Inventory Management 7.8.0 Versions
[Primavera Gateway product family]
Primavera Gateway 20.12.0-20.12.17 versions
Primavera Gateway 21.12.0-21.12.15 Versions
[Primavera P6 Enterprise Project Portfolio Management product family]
Primavera P6 Enterprise Project Portfolio Management 20.12.0.0-20.12.21.0 Versions
Primavera P6 Enterprise Project Portfolio Management 21.12.0.0-21.12.21.2 Versions
Primavera P6 Enterprise Project Portfolio Management 22.12.0.0-22.12.20.0 Versions
Primavera P6 Enterprise Project Portfolio Management 23.12.0.0-23.12.14.0 Versions
Primavera P6 Enterprise Project Portfolio Management 24.12.0.0-24.12.4.0 Versions
[Primavera Unifier product family]
Primavera Unifier 20.12.0-20.12.16 Versions
Primavera Unifier 21.12.0-21.12.17 Versions
Primavera Unifier 22.12.0-22.12.15 Versions
Primavera Unifier 23.12.0-23.12.15 Versions
Primavera Unifier 24.12.0-24.12.9 Versions
[Oracle Database Server Family]
Oracle Database Server 19.3-19.28 Versions
Oracle Database Server 21.3-21.19 Versions
Oracle Database Server 23.4-23.9 Versions
[SQLcl Family]
SQLcl versions 23.4-23.9
[Oracle Applications Framework product family]
Oracle Applications Framework 12.2.3-12.2.14 versions
[Oracle Applications Manager product family]
Oracle Applications Manager 12.2.3-12.2.14 Versions
[Oracle Marketing product family]
Oracle Marketing 12.2.3-12.2.14 Versions
[Oracle Product Hub product family]
Oracle Product Hub 12.2.3-12.2.14 Versions
[Oracle Scripting Family]
Oracle Scripting 12.2.3-12.2.14 Versions
[Oracle Workflow Suite]
Oracle Workflow 12.2.3-12.2.14 Versions
[Oracle iStore Family]
Oracle iStore 12.2.5-12.2.14 Versions
[Enterprise Manager Base Platform product family]
Enterprise Manager Base Platform version 13.5
Enterprise Manager Base Platform version 24.1
[Oracle Application Testing Suite product family]
Oracle Application Testing Suite 12.2.1.4.0 Version
Oracle Application Testing Suite 14.1.1.0.0.0 version
Oracle Application Testing Suite 14.1.2.0.0.0 Version
[Oracle Enterprise Manager for Fusion Middleware product family]
Oracle Enterprise Manager for Fusion Middleware 13.5 Version
Oracle Enterprise Manager for Fusion Middleware 24.1 version
[Oracle Essbase product family]
Oracle Essbase 21.7.3.0.0.0 version
[Oracle Banking Branch product family]
Oracle Banking Branch 14.5.0.0.0.0-14.8.0.0.0 Versions
[Oracle Banking Corporate Lending Process Management product family] Oracle Banking Corporate Lending Process Management product family
Oracle Banking Corporate Lending Process Management 14.4.0.0.0-14.7.0.0.0 Versions
[Oracle Banking Origination Product Family] Oracle Banking Origination 14.4.0.0.0-14.7.0.0.0
Oracle Banking Origination 14.5.0.0.0.0-14.7.0.0.0 versions
[Oracle Financial Services Analytical Applications Infrastructure product family] Oracle Banking Origination 14.5.0.0.0-14.7.0.0.0
Oracle Financial Services Analytical Applications Infrastructure 8.0.7.9 Version
Oracle Financial Services Analytical Applications Infrastructure 8.0.8.7 Version
Oracle Financial Services Analytical Applications Infrastructure 8.1.2.5 Version
[Oracle Financial Services Behavior Detection Platform product family]
Oracle Financial Services Behavior Detection Platform 8.0.8.1 Version
Oracle Financial Services Behavior Detection Platform 8.1.2.10 Version
Oracle Financial Services Behavior Detection Platform 8.1.2.9 Version
[Oracle Financial Services Compliance Studio product family] Oracle Financial Services Behavior Detection Platform 8.1.2.9 version
Oracle Financial Services Compliance Studio 8.1.2.8 Version
[Oracle Financial Services Model Management and Governance Suite] Oracle Financial Services Model Management and Governance Suite
Oracle Financial Services Model Management and Governance 8.1.2.7 Version
Oracle Financial Services Model Management and Governance 8.1.3.2 Version
[Oracle Financial Services Revenue Management and Billing Suite] Oracle Financial Services Revenue Management and Billing Suite
Oracle Financial Services Revenue Management and Billing 2.9.0.0.0-7.2.0.0.0 Versions
[Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition product family] Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition product family
Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition 8.0.8 Version
[Identity Manager product family]
Identity Manager 12.2.1.4.0 version
Identity Manager 14.1.2.1.0 version
[Oracle Coherence product family]
Oracle Coherence 12.2.1.4.0 version
Oracle Coherence 14.1.1.0.0.0 Version
Oracle Coherence 14.1.2.0.0.0 Version
[Oracle Enterprise Data Quality product family]
Oracle Enterprise Data Quality 12.2.1.4.0 Version
Oracle Enterprise Data Quality 14.1.2.0.0.0 Version
[Oracle Fusion Middleware MapViewer product family] Oracle Fusion Middleware MapViewer 12.1.2.0.0
Oracle Fusion Middleware MapViewer 12.2.1.4.0 Version
[Oracle Global Lifecycle Management NextGen OUI Framework family] Oracle Fusion Middleware MapViewer 12.2.1.4.0 version
Oracle Global Lifecycle Management NextGen OUI Framework 12.2.1.4.0 Version
Oracle Global Lifecycle Management NextGen OUI Framework 14.1.1.0.0 version
Oracle Global Lifecycle Management NextGen OUI Framework 14.1.2.0.0 version
[Oracle JDeveloper product family]
Oracle JDeveloper 12.2.1.4.0 Version
[Oracle Middleware Common Libraries and Tools product family] Oracle JDeveloper 12.2.1.4.0 version
Oracle Middleware Common Libraries and Tools 12.2.1.4.0 Version
Oracle Middleware Common Libraries and Tools 14.1.2.0.0 version
[Oracle Outside In Technology product family]
Oracle Outside In Technology 8.5.7 version
Oracle Outside In Technology 8.5.8 version
[Oracle SOA Suite product family]
Oracle SOA Suite 14.1.2.0.0.0 version
[Oracle Security Service Suite]
Oracle Security Service 12.2.1.4.0 version
[Oracle WebCenter Forms Recognition Suite] [Oracle WebCenter Forms Recognition Suite
Oracle WebCenter Forms Recognition 14.1.1.0.0 version
[Oracle WebCenter Portal Suite] Oracle WebCenter Portal 12.0.1.0.0
Oracle WebCenter Portal 12.2.1.4.0 Version
[Oracle WebCenter Sites product family] Oracle WebCenter Sites 12.2.1.4.0 version
Oracle WebCenter Sites 14.1.2.0.0.0 Version
[Oracle WebLogic Server family] Oracle WebCenter Sites 14.1.2.0.0 version
Oracle WebLogic Server 12.2.1.4.0 Version
Oracle WebLogic Server 14.1.1.0.0 Version
Oracle WebLogic Server 14.1.2.0.0.0 Version
[GoldenGate Stream Analytics Suite] [GoldenGate Stream Analytics Suite
GoldenGate Stream Analytics 19.1.0.0.0.0-19.1.0.0.9 Versions
[Management Pack for Oracle GoldenGate product family] GoldenGate Stream Analytics 19.1.0.0.0-19.1.0.0.9
Management Pack for Oracle GoldenGate 12.2.1.2.0 version
[Oracle GoldenGate Product Family]
Oracle GoldenGate 19.1.0.0.0.0-19.28.0.0.0.250715 Versions
Oracle GoldenGate 21.3-21.19 Versions
Oracle GoldenGate 23.4-23.9 Versions
[Oracle GoldenGate Big Data and Application Adapters product family]
Oracle GoldenGate Big Data and Application Adapters 21.3-21.19 Versions
Oracle GoldenGate Big Data and Application Adapters 23.4-23.9 Versions
[Oracle GoldenGate Stream Analytics product family] （Oracle GoldenGate Stream Analytics product family
Oracle GoldenGate Stream Analytics 19.1.0.0.0.0-19.1.0.0.11 Versions
Oracle GoldenGate Stream Analytics 19.1.0.0.0-19.1.0.0.12 Versions
[Oracle GoldenGate Studio family]
Oracle GoldenGate Studio 12.2.0.4.0 Version
[Oracle GoldenGate Veridata Product Family]
Oracle GoldenGate Veridata 12.2.1.4.0-12.2.1.4.250515 Versions
Oracle GoldenGate Veridata 23.1.0.0.0.0-23.4.0.0.0.0 Versions
[Graph Server and Client product family]
Graph Server and Client 24.4.1 version
Graph Server and Client 24.4.3 version
Graph Server and Client 25.1.0 version
Graph Server and Client 25.3.0 Versions
[Oracle Health Sciences Data Management Workbench product family] Oracle Health Sciences Data Management Workbench 3.0.0
Oracle Health Sciences Data Management Workbench 3.4.0.1.3 version
Oracle Health Sciences Data Management Workbench 3.4.1.0.10 Version
[Oracle Life Sciences InForm product family]
Oracle Life Sciences InForm 7.0.1.0 Version
[Oracle Healthcare Data Repository product family]
Oracle Healthcare Data Repository 8.2.0.5 version
[Oracle Healthcare Master Person Index Suite] Oracle Healthcare Master Person Index 5.0.0.5
Oracle Healthcare Master Person Index 5.0.0.0-5.0.9.2 Versions
[Oracle Hospitality Cruise Shipboard Property Management (SPMS) Suite]
Oracle Hospitality Cruise Shipboard Property Management (SPMS) version 23.2.5
[Oracle Hyperion Calculation Manager Family] Oracle Hospitality Cruise Shipboard Property Management (SPMS) Version 23.2.5
Oracle Hyperion Calculation Manager 11.2.22.0.000 version
[Oracle Hyperion Data Relationship Management Suite] Oracle Hyperion Calculation Manager 11.2.22.0.000 version
Oracle Hyperion Data Relationship Management 11.2.22.0.000 Version
[Oracle Hyperion Financial Management Suite] Oracle Hyperion Financial Management 11.2.22.0.000 Version
Oracle Hyperion Financial Management 11.2.22.0.000 Version
[Oracle Hyperion Infrastructure Technology Family] Oracle Hyperion Financial Management 11.2.22.0.000 Version
Oracle Hyperion Infrastructure Technology 11.2.22.0.000 Version
[Oracle Hyperion Planning product family]
Oracle Hyperion Planning 11.2.22.0.000 Version
[Oracle Documaker product family]
Oracle Documaker 12.7.2.4 Version
Oracle Documaker 13.0.0.3 Version
Oracle Documaker 13.0.1.1 version
[Oracle Insurance Policy Administration J2EE Family] Oracle Insurance Policy Administration J2EE Family
Oracle Insurance Policy Administration J2EE 11.3.1-12.0.5 Versions
[JD Edwards EnterpriseOne Orchestrator product family]
JD Edwards EnterpriseOne Orchestrator 9.2.0.0-9.2.9.4 Versions
[JD Edwards EnterpriseOne Tools product family]
JD Edwards EnterpriseOne Tools 9.2.0.0-9.2.9.4 versions
[Oracle GraalVM Enterprise Edition product family]
Oracle GraalVM Enterprise Edition 21.3.15 version
[Oracle GraalVM for JDK product family] [Oracle GraalVM for JDK product family]
Oracle GraalVM for JDK 17.0.16 Version
Oracle GraalVM for JDK 21.0.8 Version
[Oracle Java SE product family]
Oracle Java SE 11.0.28 Version
Oracle Java SE 17.0.16 Version
Oracle Java SE 21.0.8 Version
Oracle Java SE 25 Versions
Oracle Java SE 8u461 Versions
Oracle Java SE 8u461-b50 Versions
Oracle Java SE 8u461-perf Versions
[MySQL Cluster product family]
MySQL Cluster 8.0.0-8.0.40 Versions
MySQL Cluster 8.0.0-8.0.43 Versions
MySQL Cluster 8.4.0-8.4.3 Versions
MySQL Cluster 8.4.0-8.4.6 Versions
MySQL Cluster 9.0.0-9.1.0 Versions
MySQL Cluster 9.0.0-9.4.0 Versions
[MySQL Enterprise Backup family] [MySQL Enterprise Backup
MySQL Enterprise Backup 8.0.0-8.0.42 Versions
MySQL Enterprise Backup 8.4.0-8.4.5 Versions
MySQL Enterprise Backup 9.0.0-9.3.0 versions
[MySQL Server Family]
MySQL Server 8.0.0-8.0.43 Versions
MySQL Server 8.4.0-8.4.6 Versions
MySQL Server 9.0.0-9.4.0 Versions
[MySQL Shell family]
MySQL Shell 8.0.40-8.0.43 Versions
MySQL Shell 8.4.3-8.4.6 Versions
MySQL Shell 9.1.0-9.4.0 Versions
[MySQL Workbench Suite] MySQL Workbench 8.1.0-9.4.0 versions
MySQL Workbench 8.0.0-8.0.43 versions
[PeopleSoft Enterprise CS Financial Aid Suite] MySQL Workbench 8.0.0-8.0.43 versions
PeopleSoft Enterprise CS Financial Aid version 9.2
[PeopleSoft Enterprise FIN IT Asset Management Suite] MySQL Workbench 8.0.0-8.43 version
PeopleSoft Enterprise FIN IT Asset Management version 9.2
[PeopleSoft Enterprise FIN Maintenance Management Suite] [PeopleSoft Enterprise FIN Maintenance Management Suite
PeopleSoft Enterprise FIN Maintenance Management Version 9.2
[PeopleSoft Enterprise FIN Payables Suite] [PeopleSoft Enterprise FIN Payables Product Family
PeopleSoft Enterprise FIN Payables version 9.2
[PeopleSoft Enterprise PeopleTools product family]
PeopleSoft Enterprise PeopleTools 8.60 version
PeopleSoft Enterprise PeopleTools 8.61 Version
PeopleSoft Enterprise PeopleTools 8.62 version
[Oracle REST Data Services family] Oracle REST Data Services 25.1.1
Oracle REST Data Services 25.2.1 version
[Oracle Retail Advanced Inventory Planning product family] Oracle Retail Advanced Inventory Planning 15.0.3 version
Oracle Retail Advanced Inventory Planning 15.0.3 Version
Oracle Retail Advanced Inventory Planning 16.0.3 Version
[Oracle Retail Financial Integration product family] Oracle Retail Financial Integration 14.1.3 version
Oracle Retail Financial Integration 14.1.3.2 Version
Oracle Retail Financial Integration 15.0.3.1 version
Oracle Retail Financial Integration 16.0.3 version
Oracle Retail Financial Integration 19.0.1 version
[Oracle Retail Integration Bus family] Oracle Retail Integration Bus 14.0.1 version
Oracle Retail Integration Bus 14.1.3.2 version
Oracle Retail Integration Bus 15.0.3.1 version
Oracle Retail Integration Bus 16.0.3 Version
Oracle Retail Integration Bus 19.0.1 version
[Oracle Retail Invoice Matching product family]
Oracle Retail Invoice Matching 15.0.3.1 Version
Oracle Retail Invoice Matching 16.0.3 version
[Oracle Retail Merchandising System family of products]
Oracle Retail Merchandising System 16.0.3 Version
Oracle Retail Merchandising System 19.0.1 version
[Oracle Retail Price Management product family]
Oracle Retail Price Management 15.0.3.1 Version
Oracle Retail Price Management 16.0.3 Version
Oracle Retail Price Management 19.0.1 Version
[Oracle Retail Sales Audit product family] Oracle Retail Sales Audit 15.0.3 version
Oracle Retail Sales Audit 15.0.3.1 Version
Oracle Retail Sales Audit 16.0.3 Version
Oracle Retail Sales Audit 19.0.1 Version
[Oracle Retail Service Backbone family] Oracle Retail Service Backbone 14.0.1 version
Oracle Retail Service Backbone 14.1.3.2 Version
Oracle Retail Service Backbone 15.0.3.1 version
Oracle Retail Service Backbone 16.0.3 Version
Oracle Retail Service Backbone 19.0.1 version
[Oracle Retail Xstore Office Suite] Oracle Retail Xstore Office 20.0.1 version
Oracle Retail Xstore Office 20.0.5 Version
Oracle Retail Xstore Office 21.0.4 version
Oracle Retail Xstore Office 22.0.2 Version
Oracle Retail Xstore Office 23.0.2 Version
Oracle Retail Xstore Office 24.0.1 version
Oracle Retail Xstore Office 25.0.0 version
[Oracle Retail Xstore Point of Service Suite] [Oracle Retail Xstore Point of Service Family]
Oracle Retail Xstore Point of Service 20.0.5 Version
Oracle Retail Xstore Point of Service 21.0.4 Version
Oracle Retail Xstore Point of Service 22.0.2 Version
Oracle Retail Xstore Point of Service 23.0.2 Version
Oracle Retail Xstore Point of Service 24.0.1 Version
Oracle Retail Xstore Point of Service 25.0.0 version
[Retail Predictive Application Server family] Retail Predictive Application Server 15.0.0 version
Retail Predictive Application Server 15.0.3 version
Retail Predictive Application Server 16.0.3 version
[Oracle Secure Backup product family]
Oracle Secure Backup 19.1.0.1.0 version
[Siebel Apps – Marketing product family]
Siebel Apps – Marketing 25.7 and earlier versions
[Siebel CRM Deployment product family]
Siebel CRM Deployment 25.7 and earlier
Siebel CRM Deployment 25.8 and earlier
[Siebel CRM Development product family]
Siebel CRM Development 25.7 and earlier
[Siebel CRM End User family] [Siebel CRM End User product line
Siebel CRM End User 25.10 and earlier
Siebel CRM End User 25.7 and earlier
[Oracle Spatial Studio product family]
Oracle Spatial Studio 24.2.0 or earlier
Oracle Spatial Studio 25.1.2 Version
[Oracle Transportation Management Suite]
Oracle Transportation Management 6.5.3 version
[Oracle Solaris Family]
Oracle Solaris 11 version
[Oracle Solaris Cluster Family] [Oracle Solaris Cluster Family
Oracle Solaris Cluster 4 Versions
[Oracle ZFS Storage Appliance Kit family] Oracle ZFS Storage Appliance Kit 8.8 version
Oracle ZFS Storage Appliance Kit version 8.8
[Oracle TimesTen In-Memory Database product family]
Oracle TimesTen In-Memory Database 18.1.4.1.0-18.1.4.48.0 Versions
Oracle TimesTen In-Memory Database 18.1.4.1.0-18.1.4.53.0 Versions
Oracle TimesTen In-Memory Database 18.1.4.39.0-18.1.4.53.0 Versions
Oracle TimesTen In-Memory Database 22.1.1.1.1.0-22.1.1.1.30.0 Versions
Oracle TimesTen In-Memory Database 22.1.1.1.1.0-22.1.1.35.0 Versions
Oracle TimesTen In-Memory Database 22.1.1.19.0-22.1.1.33.0 Versions
[Oracle Utilities Application Framework product family]
Oracle Utilities Application Framework 24.2.0.0.0.0 Version
Oracle Utilities Application Framework 24.3.0.0.0.0 version
Oracle Utilities Application Framework 25.10 Version
Oracle Utilities Application Framework 25.4 Version
Oracle Utilities Application Framework 4.3.0.5.0 Version
Oracle Utilities Application Framework 4.3.0.6.0 Version
Oracle Utilities Application Framework 4.4.0.0.0 version
Oracle Utilities Application Framework 4.4.0.2.0 Version
Oracle Utilities Application Framework 4.4.0.3.0 version
Oracle Utilities Application Framework 4.4.0.4.0 Version
Oracle Utilities Application Framework 4.5.0.0.0.0 Version
Oracle Utilities Application Framework 4.5.0.1.1 Version
Oracle Utilities Application Framework 4.5.0.1.3 Version
Oracle Utilities Application Framework 4.5.0.2.0 Version
[Oracle Utilities Network Management System product family] Oracle Utilities Network Management System 2.0.0.0.0
Oracle Utilities Network Management System 2.4.0.1.31 version
Oracle Utilities Network Management System 2.5.0.1.15 Version
Oracle Utilities Network Management System 2.5.0.2.9 Version
Oracle Utilities Network Management System 2.6.0.1.8 Version
Oracle Utilities Network Management System 2.6.0.2.3 Version
[Oracle VM VirtualBox product family]
Oracle VM VirtualBox 7.1.12 Version
Oracle VM VirtualBox 7.2.2 Version
Resolved Vulnerabilities
Oracle has released a security update that resolves 374 vulnerabilities. The list of major vulnerabilities is as follows
A high-level denial-of-service vulnerability in Oracle Banking Corporate Lending Process Management, Oracle Banking Origination, and Oracle Communications Unified Assurance (CVE-2025-32415, CVSS 7.5)
High-level, high-privileged user network access vulnerability in Oracle Business Intelligence Enterprise Edition (CVE-2025-53049, CVSS 8.4)
Oracle Commerce Platform, Oracle Transportation Management, Oracle Documaker, Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition, Oracle Fusion Middleware MapViewer, Oracle Retail Xstore Point of Service, Oracle Communications Convergence, Oracle Communications EAGLE Element Management System, Oracle Communications Cloud Native Core Unified Data Repository, Oracle Communications Contacts Server, Oracle Middleware Common Libraries and Tools, Oracle Banking Branch, Oracle Communications Cloud Native Core Service Communication Proxy, Oracle Retail Merchandising System, Oracle Utilities Application Framework, Oracle Application Testing Suite, Oracle Communications Cloud Native Core Security Edge Protection Proxy, Oracle Communications Calendar Server, Oracle Financial Services Model Management and Governance, Oracle Financial Services Analytical Applications Infrastructure, Primavera Unifier, Oracle Communications Network Analytics Data Director, Oracle Hyperion Calculation Manager, Oracle Business Intelligence Enterprise Edition, Oracle Insurance Policy Administration J2EE, Highly Critical Denial of Service Vulnerability (CVE-2025-48976, CVSS 7.5)
High-level Denial of Service Vulnerability in Oracle Communications Cloud Native Core Certificate Management (CVE-2025-7425, CVSS 7.8)
High-level unauthorized user key data accessibility vulnerability in Oracle Communications Cloud Native Core Console (CVE-2025-7962, CVSS 7.5)
High level denial of service vulnerability in Oracle Communications Cloud Native Core Network Repository Function, Oracle Communications Cloud Native Core Binding Support Function, Oracle Communications Cloud Native Core Binding Support Function, Oracle Communications Cloud Native Core Policy, Oracle Communications Unified Inventory Management, Oracle Financial Services Compliance Studio, and Oracle Communications Cloud Native Core Policy (CVE-2025-5115, CVSS 7.5)
Highly Critical Denial of Service Vulnerability in Oracle Communications Cloud Native Core Policy (CVE-2025-5115 and two others, CVSS 7.5)
High level denial of service vulnerability in Oracle Communications Converged Charging System, Oracle Communications Order and Service Management, Oracle Communications Network Charging and Control, Oracle Retail Xstore Point of Service, Oracle Communications Cloud Native Core Network Slice Selection Function, Oracle Communications Cloud Native Core Binding Support Function, Oracle Communications Pricing Design Center, Oracle Communications Offline Mediation Controller, Oracle Communications Cloud Native Core Policy, Oracle Communications Service Catalog and Design, Oracle Hospitality Cruise Shipboard Property Management (SPMS), Oracle Communications Billing and Revenue Management, Oracle Communications Cloud Native Core Unified Data Repository, Oracle Communications Unified Inventory Management, Oracle Banking Branch, Oracle Coherence에 존재하는 높은 수준의 서비스 거부 가능 취약점 (CVE-2025-55163, CVSS 7.5)
Severe network accessibility vulnerability for unauthenticated users in Oracle Communications Converged Charging System, Oracle Communications Unified Assurance, Oracle Communications Network Charging and Control, Oracle Communications Convergent Charging Controller, Oracle Communications Cloud Native Core Certificate Management, Oracle Communications Messaging Server, MySQL Workbench, Oracle Communications Cloud Native Core Policy, Oracle Communications Network Analytics Data Director, Oracle Financial Services Compliance Studio, and Oracle Communications Cloud Native Core Unified Data Repository (CVE-2025-6965, CVSS 9.8)
High Critical Denial of Service Vulnerability in Oracle Communications EAGLE Element Management System (CVE-2025-1948, CVSS 7.5)
High-level, low-privileged user can log on to the system vulnerability in Oracle Communications Network Analytics Data Director (CVE-2025-25724, CVSS 7.8)
High-level, low-privileged user network access vulnerability in Oracle Communications Operations Monitor (CVE-2025-57803, CVSS 8.8)
Key data accessibility vulnerability in Oracle Communications Operations Monitor for high-level, unauthorized users (CVE-2025-53643, CVSS 7.5)
Critical data accessibility vulnerability in Oracle Communications Unified Assurance, Oracle Communications Network Charging and Control, Oracle Communications Convergent Charging Controller, Oracle SOA Suite, Oracle Communications Billing and Revenue Management, Oracle Communications Service Catalog and Design, and Oracle Banking Branch by high-level unauthorized users (CVE-2025-27817, CVSS 7.5)
High-level denial-of-service vulnerability in Oracle Communications Unified Inventory Management (CVE-2025-32990 and two others, CVSS 8.2)
High-level Denial of Service Vulnerability in Oracle Enterprise Data Quality (CVE-2025-27533, CVSS 7.5)
High-level unauthorized user key data accessibility vulnerability in Oracle Financial Services Analytical Applications Infrastructure, Oracle Communications Order and Service Management, Oracle Communications EAGLE Element Management System, Oracle Communications Unified Inventory Management, and Primavera Gateway (CVE-2025-27553, CVSS 7.5)
High-level unauthorized user critical data access vulnerability in Oracle Financial Services Analytical Applications Infrastructure, Oracle Financial Services Behavior Detection Platform, and Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition (CVE-2025-41249, CVSS 7.5)
High-level, unauthorized user critical data accessibility vulnerability in Oracle Financial Services Analytic Applications Infrastructure (CVE-2025-53036 and two others, CVSS 8.6)
High-level, potentially denial-of-service vulnerability in Oracle Financial Services Analytical Applications Infrastructure (CVE-2025-61756, CVSS 7.5)
Severe Network Accessible Vulnerability for Unauthenticated Users in Oracle Financial Services Analytical Applications Infrastructure (CVE-2025-53037, CVSS 9.8)
Critical Data Accessibility Vulnerability in Oracle Java SE, Oracle GraalVM for JDK by Highly Unauthorized Users (CVE-2025-53066, CVSS 7.5)
Severe network accessibility vulnerability for unauthorized users in Oracle Marketing (CVE-2025-53072 and 2 others, CVSS 9.8)
High critical data accessibility vulnerability for unauthorized users in Oracle Product Hub (CVE-2025-53043, CVSS 8.1)
Oracle Utilities Application Framework, Oracle Hyperion Infrastructure Technology, Oracle Communications Cloud Native Core Console, Oracle Hyperion Planning, Retail Predictive Application Server, Oracle Documaker, Oracle Communications Cloud Native Core Binding Support Function, JD Edwards EnterpriseOne Tools, Oracle Solaris Cluster, Oracle JDeveloper, A network accessibility vulnerability exists in Oracle Retail Invoice Matching, PeopleSoft Enterprise PeopleTools, Oracle Hospitality Cruise Shipboard Property Management (SPMS), Oracle Hyperion Calculation Manager, Oracle Insurance Policy Administration J2EE, and Oracle Retail Price Management that allows a high-level, low-privileged user to gain network access (CVE-2025-48734, CVSS 8.8)
High-level, high-privilege user can log on to the system vulnerability in Oracle VM VirtualBox (CVE-2025-62587 and 5 others, CVSS 8.2)
High-level, potentially denial-of-service vulnerability in Oracle WebLogic Server (CVE-2025-61752, CVSS 7.5)
High-level, high-privileged user network access vulnerability in Oracle ZFS Storage Appliance Kit (CVE-2025-62290, CVSS 7.2)
High-level vulnerability in Oracle Communications Cloud Native Core Network Function Cloud Native Environment that can be exploited by an unauthenticated attacker logged on to the infrastructure on which the environment is running (CVE-2025-53547, CVSS 8.6)
High level vulnerability in Oracle Communications Cloud Native Core Policy and Oracle Communications Cloud Native Core Binding Support Function in the Binding Support Function that can be exploited by an unauthenticated attacker logged on to the infrastructure on which the Binding Support Function is running (CVE-2025-4802, CVSS 7.8)
Vulnerability Patches
Product-specific Vulnerability Patches were made available in the October 21, 2025 update. For more information on Vulnerability Patches, please see the Referenced Sites documentation.
Referenced Sites
[1] Critical Patch Update – October 2025