CVE-2025-30737 is a medium-severity vulnerability affecting Oracle Smart View for Office, specifically version 24.200 of the Core Smart View component. This vulnerability allows a high-privileged attacker with network access via HTTP to compromise the system, leading to unauthorized modification, deletion, or access to critical or all accessible data within Oracle Smart View for Office. Exploitation is difficult and requires human interaction from a non-attacker. The CVSS 3.1 Base Score is 5.7, indicating significant impacts on confidentiality and integrity. While the attack vector is network-based, the high attack complexity and the requirement for user interaction reduce its overall severity. Currently, there is no evidence of active exploitation, and no public exploit intelligence (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, which is typical for the vast majority of vulnerabilities.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
24.200CPE matchmatch criteria | cpe:2.3:a:oracle:smart_view_for_office:24.200:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.