CVE-2025-61882CISA KEV
Oracle E-Business Suite Unspecified Vulnerability
CISA lists this Oracle E-Business Suite vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.
- Product
- E-Business Suite
- Added to KEV
- 6 Oct 2025
- Federal remediation due
- 27 Oct 2025
- Known ransomware use
- Yes