#cve-2025-61884

[ follow ]
#oracle-e-business-suite #unauthenticated-remote-access #clop-linked-attacks #oracle #e-business-suite
fromTheregister
8 hours ago

Oracle rushes out another emergency E-Business Suite patch

The newly disclosed flaw, tracked as CVE-2025-61884 and slapped with a CVSS score of 7.5, affects the Runtime UI component in EBS, and Oracle's advisory warns that the flaw can be exploited remotely without authentication and "may allow access to sensitive resources." In other words, it's another wide-open door into one of Oracle's most business-critical systems, and the kind of bug that cybercrims love to chain with others for data theft, extortion, or to delve deeper into enterprise networks.
Information security
Information security
fromTechzine Global
1 day ago

Emergency patch for vulnerability in Oracle E-Business Suite

Critical Oracle E-Business Suite vulnerability CVE-2025-61884 allows unauthenticated attackers to disclose sensitive data across EBS versions 12.2.3–12.2.14; urgent patching recommended.
[ Load more ]