Vulnerabilitycritical

Oracle issued an emergency security update to fix new E-Business Suite flaw CVE-2025

Security Affairsby @securityaffairsOct 14, 2025 · 07:31 UTC (Oct 14, 2025)3 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2025-61884 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-61884 CVE-2025-61882

Tags: cve-2025-61884 cve-2025-61882 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-61882	Unauthenticated Takeover of Oracle E-Business Suite Concurrent Processing	9.8	100%	KEVRansomware	Oct 5, 2025 KEV Oct 6, 2025
CVE-2025-61884	Unauthenticated SSRF in Oracle E-Business Suite Configurator	7.5	96%	KEVRansomwarePoC	Oct 12, 2025 KEV Oct 20, 2025

From the original article

3 min read at securityaffairs.com

Oracle issued an emergency security update to address a new E-Business Suite (EBS) vulnerability tracked as CVE-2025-61884. Oracle released an emergency patch to address an information disclosure flaw, tracked as CVE-2025-61884 (CVSS Score of 7. 5), in E-Business Suite’s Runtime UI component (versions 12.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.