CVE-2025-30733 Details
Description
Vulnerability in the RDBMS Listener component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise RDBMS Listener. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all RDBMS Listener accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).
A vulnerability exists in the RDBMS Listener component of Oracle Database Server, specifically in versions 19.3-19.26, 21.3-21.17, and 23.4-23.7. This vulnerability allows an unauthenticated attacker with network access via Oracle Net to compromise the RDBMS Listener. Exploitation of this vulnerability requires human interaction from a third party. Successful attacks can lead to unauthorized access to sensitive data or complete access to all data accessible through the RDBMS Listener.
Users can apply the patch provided in the April 2025 Oracle Critical Patch Update to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 16, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://driftnet.io/blog/oracle-tns-memory-leak | CVE | |
| https://www.oracle.com/security-alerts/cpuapr2025.html | [email protected] | PatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-287 | Improper Authentication | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| oracle rdbms listener | >= 19.3, <= 19.26 >= 21.3, <= 21.17 >= 23.4, <= 23.7 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 19, 2025 | CVE Modified | CVE |
| Apr 21, 2025 | Initial Analysis | [email protected] |
| Apr 16, 2025 | CVE Modified | CISA-ADP |
| Apr 15, 2025 | New CVE Received | [email protected] |