Another remotely exploitable Oracle EBS vulnerability requires your attention (CVE-2025-61884)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-61882 | Unauthenticated Takeover of Oracle E-Business Suite Concurrent Processing | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2025-61884 | Unauthenticated SSRF in Oracle E-Business Suite Configurator | 7.5 | 96% | KEVRansomwarePoC | KEV |
From the original article
2 min read at helpnetsecurity.com
Oracle has revealed the existence of yet another remotely exploitable Oracle E-Business Suite vulnerability (CVE-2025-61884). CVE-2025-61884 is a vulnerability in the Runtime user interface in the Oracle Configurator product of Oracle E-Business Suite (EBS). Like CVE-2025-61882 before it, it officially affects the ESB versions 12.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.