Skip to content
fr Sign in
5.4 Medium

CVE-2025-30694 Vulnerability in the XML Database component of Oracle Database Server

Description

Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.7. Easily exploitable vulnerability allows low privileged attacker having User Account privilege with network access via HTTP to compromise XML Database. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in XML Database, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of XML Database accessible data as well as unauthorized read access to a subset of XML Database accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).

Affected products and versions

Product Affected versions Fixed in
Oracle Database Server 23.4 23.4 → 23.7 No fix stated
Oracle Database Server 21.3 21.3 → 21.17 No fix stated
Oracle Database Server 19.3 19.3 → 19.26 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Oracle Database Server

The 57 CVEs of Oracle Database Server →
CVE-2026-91615 Vulnerability in the Java VM component of Oracle Database Server 6.3 Medium CVE-2026-91568 Vulnerability in the RDBMS component of Oracle Database Server 7.7 High CVE-2026-91503 Vulnerability in the VPD component of Oracle Database Server 8.1 High CVE-2026-91499 Vulnerability in the RDBMS component of Oracle Database Server 8.8 High
Track this CVE