6.7
Medium
CVE-2025-21578 Vulnerability in Oracle Secure Backup (component: General)
Description
Vulnerability in Oracle Secure Backup (component: General). Supported versions that are affected are 12.1.0.1, 12.1.0.2, 12.1.0.3, 18.1.0.0, 18.1.0.1 and 18.1.0.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to compromise Oracle Secure Backup. Successful attacks of this vulnerability can result in takeover of Oracle Secure Backup. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Secure Backup 18.1 | 18.1.0.0 → 18.1.0.2 | No fix stated |
| Oracle Secure Backup 12.1 | 12.1.0.1 → 12.1.0.3 | No fix stated |
Other CVEs of Oracle Secure Backup
The 7 CVEs of Oracle Secure Backup →
CVE-2026-101484
Vulnerability in Oracle Secure Backup (component: Backup and Restore)
9.8
Critical
CVE-2026-101483
Vulnerability in Oracle Secure Backup (component: Device Management and Support)
6.5
Medium
CVE-2026-101480
Vulnerability in Oracle Secure Backup (component: NDMP daemon)
5.3
Medium
CVE-2026-101482
Vulnerability in Oracle Secure Backup (component: Device Management and Support)
7.8
High