CVE Watch—

CVE-2025-61882

Oracle E-Business Suite Unspecified Vulnerability

CVSS

—

No CVSS

EPSS

99.7%

p100

KEV

YES

Oct 6, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

99.7%EPSS · 30 days99.7%

2026-06-302026-07-16

KEV catalog record

Product

Oracle / E-Business Suite

Vulnerability

Oracle E-Business Suite Unspecified Vulnerability

Added to KEV

Oct 6, 2025

Remediate by

Oct 27, 2025

Known ransomware use

Yes

Summary description

Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://www.oracle.com/security-alerts/alert-cve-2025-61882.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-61882

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-61884—

99.9%

KEV—80Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability—CVE-2022-21587—

99.9%

KEV—80Oracle E-Business Suite Unspecified Vulnerability—CVE-2026-468179.8 CRI

60.3%

KEV—68Oracle E-Business Suite Improper Privilege Management Vulnerability18h