CVE-2025-61882—Oracle E-Business Suite Unspecified Vulnerability

漏洞名称

Oracle E-Business Suite Unspecified Vulnerability

描述

Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

其他说明

• https://www.oracle.com/security-alerts/alert-cve-2025-61882.html
• https://nvd.nist.gov/vuln/detail/CVE-2025-61882

相关新闻文章

• Over 900 Oracle E-Business instances exposed to ongoing attacksJuly 1, 2026
• The biggest cybersecurity and cyberattack stories of 2025January 1, 2026
• Clop ransomware targets Gladinet CentreStack in data theft attacksDecember 18, 2025
• GlobalLogic warns 10,000 employees of data theft after Oracle breachNovember 11, 2025
• CISA confirms hackers exploited Oracle E-Business Suite SSRF flawOctober 21, 2025