Oracle over the weekend announced the availability of a patch for another severe E-Business Suite (EBS) vulnerability that can be exploited to gain access to sensitive data. The newly patched flaw is tracked as CVE-2025-61884 and it has been assigned a ‘high severity’ rating. According to Oracle’s advisory, it impacts the Runtime UI component of Oracle Configurator and it can be exploited remotely without authentication and without requiring user interaction. The disclosure and patching of CVE-2025-61884 comes roughly two weeks after executives at dozens of organizations received extortion emails claiming that sensitive information had been stolen from their EBS instance. Oracle initially said the attacks exploited vulnerabilities patched in July 2025. It later admitted that a zero-day…