{"schemaVersion":3,"id":"CVE-2025-62288","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: Logger).  Supported versions that are affected are 3.4.0.1.3 and  3.4.1.0.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Health Sciences Data Management Workbench.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Health Sciences Data Management Workbench accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).","dates":{"published":"2025-10-21T20:03:15.580Z","modified":"2025-10-21T20:46:26.380Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.9,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":4.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00303,"percentile":0.21657,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.02000000000000001,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00283},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00283,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00283,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00283,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00283,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00283,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00283,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00283,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00303,"percentile":0.21657}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00283,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00283,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00303,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00303,"percentile":0.21657}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-267","name":"Privilege Defined With Unsafe Actions","description":"A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/267.html"}],"affected":[{"vendor":"oracle corporation","product":"oracle health sciences data management workbench","name":"Oracle Health Sciences Data Management Workbench","label":"oracle health sciences data management workbench","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.4.0.1.3","noFixRecorded":false,"fixedIn":null},{"text":"3.4.1.0.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.4.0.1.3 | 3.4.1.0.10","eol":null,"hubHref":"/vendor/oracle_corporation/oracle_health_sciences_data_management_workbench"},{"vendor":"oracle","product":"health_sciences_data_management_workbench","name":"health sciences data management workbench","label":"health_sciences_data_management_workbench","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.4.0.1.3","noFixRecorded":false,"fixedIn":null},{"text":"3.4.1.0.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.4.0.1.3 | 3.4.1.0.10","eol":null,"hubHref":"/vendor/oracle/health_sciences_data_management_workbench"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2025.html","label":"www.oracle.com/security-alerts/cpuoct2025.html","hostname":"www.oracle.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2025-10-21T20:03:15.580Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-10-21T20:46:26.380Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":20,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T22:25:34.234Z","stale":false,"partial":false}}