CVE-2025-62479

LOW
STIX 2.1 vulnerability

Record summary

CVE-2025-62479 has a selected CVSS score of 2.7 (low).

Description

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle ZFS Storage Appliance Kit. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).

Description source: GitHub Advisory

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 21, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Oracle ZFS Storage Appliance Kit

Browse Oracle Corporation / Oracle ZFS Storage Appliance Kit
CVE List8.8affected

References

2