Oracle · E-Business Suite
CVE-2025-61882
Oracle E-Business Suite Unspecified Vulnerability
Nedir
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CISA: Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.
Ne yapmalı
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
ABD federal kurumları için son tarih: 27 Ekim 2025
Oracle için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 15 Tem 2026 | Improper Privilege Management | E-Business Suite | Kritik 9,8 | 12% |
| 20 Eki 2025 | Server-Side Request Forgery (SSRF) | E-Business Suite | Yüksek 7,5 | 96% |
| 2 Şub 2023 | Unspecified | E-Business Suite | Kritik 9,8 | 98% |
| 24 Ağu 2026 | Improper Access Control | HTTP Server and Oracle Weblogic Server Proxy Plug-in | Kritik 10,0 | 73% |
| 12 Haz 2026 | PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function | PeopleSoft Enterprise PeopleTools | Kritik 9,8 | 97% |
| 1 Haz 2026 | Unspecified | WebLogic Server | Yüksek 7,5 | 74% |
| 21 Kas 2025 | Missing Authentication for Critical Function | Fusion Middleware | Kritik 9,8 | 89% |
| 24 Şub 2025 | Deserialization | Agile Product Lifecycle Management (PLM) | Yüksek 8,8 | 3,9% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.