Search/CVE-2025-61882
● CVE — Critical

CVE-2025-61882

VendororacleProductconcurrent processingDiscoveredOct 5, 2025UpdatedAug 4, 2026

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

View graph Watch Export
CVSS v3.1
9.8 CRITICAL
EPSS
99.7%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
18
sources referencing this CVE
Related IOCs
12
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
● 0.01pp
99.7% → 99.7% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
23 relationships
Timeline
disclosure → media coverage
Oct 5, 2025
Disclosure — published as a CVE record. · last revised by NVD Aug 4, 2026
Oct 5, 2025
redhotcyber.com reports: Vulnerabilità da 9.8 in Oracle E-Business Suite: aggiornamenti urgenti necessari
Oct 6, 2025
bleepingcomputer.com reports: Oracle patches EBS zero-day exploited in Clop data theft attacks
Oct 6, 2025
isc.sans.edu reports: Quick and Dirty Analysis of Possible Oracle E-Business Suite Exploit Script (CVE-2025-61882), (Mon, Oct 6th)
Oct 6, 2025
thehackernews.com reports: Oracle Rushes Patch for CVE-2025-61882 After Cl0p Exploited It in Data Theft Attacks
Oct 6, 2025
securityweek.com reports: Oracle E-Business Suite Zero-Day Exploited in Cl0p Attacks
Oct 6, 2025
helpnetsecurity.com reports: Cl0p exploits Oracle E-Business Suite zero-day in data theft, extortion campaign (CVE-2025-61882)
Oct 7, 2025
thehackernews.com reports: Oracle EBS Under Fire as Cl0p Exploits CVE-2025-61882 in Real-World Attacks
Oct 7, 2025
helpnetsecurity.com reports: Leaked Oracle EBS exploit scripts expected to drive new wave of attacks (CVE-2025-61882)
Oct 10, 2025
redhotcyber.com reports: Zero-Day in Oracle E-Business Suite sotto attacco: Clop Sfrutta il CVE-2025-61882
Oct 12, 2025
helpnetsecurity.com reports: Another remotely exploitable Oracle EBS vulnerability requires your attention (CVE-2025-61884)
Nov 17, 2025
research.checkpoint.com reports: 17th November – Threat Intelligence Report
Dec 2, 2025
incibe.es reports: Refuerzo de la ciberseguridad tras la brecha en Sistemas Oracle del Washington Post
Sep 19, 2026
bleepingcomputer.com reports: ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
Sep 21, 2026
infosecurity-magazine.com reports: ShinyHunters Claim Hack of Rival Ransomware Gang Clop
Sep 22, 2026
redhotcyber.com reports: Hacker contro Hacker! I Criminali di ShinyHunters hackerano Clop e li ricattano
Oct 28, 2026
bleepingcomputer.com reports: Hackers now scanning systems for recently-patched Oracle flaw
Oct 28, 2026
thehackernews.com reports: Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Oct 29, 2026
helpnetsecurity.com reports: Exploitation attempts against recently patched Oracle EBS flaw have begun (CVE-2026-101767)
Public PoC (10)
github.com/rxerium/CVE-2025-61882-CVE-2025-61884github.com/watchtowrlabs/watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882github.com/Sachinart/CVE-2025-61882github.com/zerozenxlabs/CVE-2025-61882-Oracle-EBSgithub.com/MindflareX/CVE-2025-61882-POCgithub.com/AdityaBhatt3010/CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploitgithub.com/222dff-afk/Blackash-CVE-2025-61882github.com/BattalionX/http-oracle-ebs-cve-2025-61882.nsegithub.com/Zhert-lab/CVE-2025-61882-CVE-2025-61884github.com/George0Papasotiriou/CVE-2025-61882-Oracle-BI-Publisher-RCE
Unverified third-party code — review before executing.