RansomwarecriticalExploited in the wild

New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login

The Hacker Newsby @TheHackersNewsOct 20, 2025 · 18:54 UTC (Oct 20, 2025)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-61884 CVE-2025-61882

Tags: cve-2025-61884 cve-2025-61882 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-61882	Unauthenticated Takeover of Oracle E-Business Suite Concurrent Processing	9.8	100%	KEVRansomware	Oct 5, 2025 KEV Oct 6, 2025
CVE-2025-61884	Unauthenticated SSRF in Oracle E-Business Suite Configurator	7.5	96%	KEVRansomwarePoC	Oct 12, 2025 KEV Oct 20, 2025

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Oct 12, 2025 Vulnerability / Threat Intelligence Oracle on Saturday issued a security alert warning of a fresh security flaw impacting its E-Business Suite that it said could allow unauthorized access to sensitive data. The vulnerability, tracked as CVE-2025-61884 , carries a CVSS score of 7. 5, indicating high severity.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.