Oracle · E-Business Suite
CVE-2025-61882
Oracle E-Business Suite Unspecified Vulnerability
Was es ist
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CISA: Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.
Was zu tun ist
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Frist für US-Bundesbehörden: 27. Oktober 2025
Weitere ausgenutzte Schwachstellen von Oracle
| Hinzugefügt | Schwachstelle | Produkt | Schweregrad | Angriffswahrscheinlichkeit |
|---|---|---|---|---|
| 15.07.2026 | Improper Privilege Management | E-Business Suite | Kritisch 9,8 | 12% |
| 20.10.2025 | Server-Side Request Forgery (SSRF) | E-Business Suite | Hoch 7,5 | 96% |
| 02.02.2023 | Unspecified | E-Business Suite | Kritisch 9,8 | 98% |
| 24.08.2026 | Improper Access Control | HTTP Server and Oracle Weblogic Server Proxy Plug-in | Kritisch 10,0 | 73% |
| 12.06.2026 | PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function | PeopleSoft Enterprise PeopleTools | Kritisch 9,8 | 97% |
| 01.06.2026 | Unspecified | WebLogic Server | Hoch 7,5 | 74% |
| 21.11.2025 | Missing Authentication for Critical Function | Fusion Middleware | Kritisch 9,8 | 89% |
| 24.02.2025 | Deserialization | Agile Product Lifecycle Management (PLM) | Hoch 8,8 | 3,9% |
Quellen: Known Exploited Vulnerabilities (CISA, gemeinfrei), CVE records (cve.org) und EPSS (FIRST). Die Angriffswahrscheinlichkeit ist die EPSS-Schätzung, dass jemand in den nächsten 30 Tagen versucht, die Schwachstelle auszunutzen.