CVE-2025-50105 – Oracle Universal Work Queue HTTP Unauthorized Access and Data Manipulation

July 16, 2025

CVE ID : CVE-2025-50105

Published : July 15, 2025, 8:15 p.m. | 6 hours, 44 minutes ago

Description : Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Universal Work Queue. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Universal Work Queue accessible data as well as unauthorized access to critical data or complete access to all Oracle Universal Work Queue accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).

Severity: 8.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-50108 – Oracle Hyperion Financial Reporting Workspace HTTP Unauthorized Access and Data Modification

Next Article CVE-2025-50067 – Oracle Application Express Strategic Planner Starter App HTTP Takeover Vulnerability

In-House vs Outsourcing for React.js Development: Understand What Is Best for Your Enterprise

Tiny Screens, Big Impact: The Forgotten Art Of Developing Web Apps For Feature Phones

Kong AI Gateway 3.11 introduces new method for reducing token costs

Native vs hybrid vs cross-platform: Resolving the trilemma

You’ll soon be able to chat with Copilot and attend Teams meetings while driving your Mercedes-Benz — now there’s no excuse to miss your meetings

Intel is laying off thousands of US workers in AI restructuring — CEO Lip-Bu Tan says it’s “too late” to catch up with the competition

Elon Musk says “We need more babies” — then creates digital girlfriends so you actually won’t go out and make any babies

I don’t play my handheld gaming PCs without this $10 accessory — Here’s why it’s a must-have for anyone who owns an ROG Ally, Steam Deck, or Legion Go

PHP 8.5.0 Alpha 2 available for testing

PHP 8.5.0 Alpha 2 available for testing

The details of TC39’s last meeting

Postgres RAG Stack: Embedding, Chunking & Vector Search

You’ll soon be able to chat with Copilot and attend Teams meetings while driving your Mercedes-Benz — now there’s no excuse to miss your meetings

You’ll soon be able to chat with Copilot and attend Teams meetings while driving your Mercedes-Benz — now there’s no excuse to miss your meetings

Intel is laying off thousands of US workers in AI restructuring — CEO Lip-Bu Tan says it’s “too late” to catch up with the competition

Elon Musk says “We need more babies” — then creates digital girlfriends so you actually won’t go out and make any babies

CVE-2025-50105 – Oracle Universal Work Queue HTTP Unauthorized Access and Data Manipulation

Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises

CVE-2025-4680 – upKeeper Instant Privilege Access Input Validation Bypass

AI updates from the past week: New OpenAI models, NVIDIA AI-Q Blueprint, and Anthropic’s Google Workspace integration — April 18, 2025

CVE-2025-6851 – “WordPress Broken Link Notifier SSRF”

CVE-2025-47891 – Apache Struts Command Injection

CVE-2025-49881 – CyberChimps Responsive Blocks Cross-site Scripting

One of the best PowerToys features just got even better — and it puts Windows Search to shame

Meta AI Researchers Introduced a Scalable Byte-Level Autoregressive U-Net Model That Outperforms Token-Based Transformers Across Language Modeling Benchmarks

The easiest way to try out Ubuntu Linux

CVE-2025-50105 – Oracle Universal Work Queue HTTP Unauthorized Access and Data Manipulation

Related Posts