Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-50067

Vulnerability in Oracle Application Express (component: Strategic Planner Starter App). Supported versions that are affected are 24.2.4 and 24.2.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Express. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Application Express. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H).

Published

2025-07-15T20:15:41.340

Last Modified

2025-07-24T21:27:21.010

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 9.0 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-601
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application oracle application_express 24.2.4 Yes
Application oracle application_express 24.2.5 Yes
References