Riskcovery

CVE-2025-50066

State
Published
Severity
2.7 Low
Published
Jul 15, 2025
Updated
Jul 16, 2025
Reserved
Jun 11, 2025

Read the record on cve.org

Description

Vulnerability in the Oracle Database Materialized View component of Oracle Database Server. Supported versions that are affected are 19.3-19.27, 21.3-21.18 and 23.4-23.8. Easily exploitable vulnerability allows high privileged attacker having Execute on DBMS_REDEFINITION privilege with network access via Oracle Net to compromise Oracle Database Materialized View. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database Materialized View accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

Scores

CVSSScoreVectorSource
3.12.7 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:Noracle

Weaknesses

  • CWE-269 Improper Privilege Management

Affected Products

ProductVersions
Oracle Database ServerOracle Corporation
  • 19.3 through 19.27Affected
  • 21.3 through 21.18Affected
  • 23.4 through 23.8Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.