CVE-2025-61884—Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

漏洞名称

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

描述

Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

其他说明

• https://www.oracle.com/security-alerts/alert-cve-2025-61884.html
• https://nvd.nist.gov/vuln/detail/CVE-2025-61884

相关新闻文章

• CISA orders feds to patch actively exploited Oracle flaw by SaturdayJuly 16, 2026
• CISA flags two-year-old Oracle flaw as actively exploited in attacksJune 2, 2026
• The biggest cybersecurity and cyberattack stories of 2025January 1, 2026
• CISA confirms hackers exploited Oracle E-Business Suite SSRF flawOctober 21, 2025
• Five New Exploited Bugs Land in CISA's Catalog — Oracle and Microsoft Among TargetsOctober 20, 2025

相关 CWE

• CWE-918