VulnRadar

Data against noise.

Built with NaN
Page generated: 08 Nov 2026, 06:54 UTC
← Dashboard

CVE-2025-61882

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co…

Read full description
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVSS 9.8 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
9.0/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 9.8: +1.47
  • Fresh EPSS: 99.73%: +0.50

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 26 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

Rescana
Press · 21 Jul 2026, 07:00 · Estée Lauder Data Breach Analysis: Oracle E-Business Suite CVE-2025-61882 Exploitation by Clop Ransomware - Rescana
The Hacker News
Press · 30 Jun 2026, 07:00 · Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild - The Hacker News
Bitsight
Press · 03 Feb 2026, 08:00 · Critical Vulnerability Alert: CVE-2025-40551 in SolarWinds Web Help Desk - Bitsight
Infosecurity Magazine
Press · 29 Dec 2025, 08:00 · Five Key Flaws Exploited in 2025's Major Software Supply Chain Incidents - Infosecurity Magazine
Rescana
Press · 04 Dec 2025, 08:00 · University of Pennsylvania Data Breach: Oracle E-Business Suite (CVE-2025-61882) Exploit by Clop Ransomware Group - Rescana
See all 26 source documents
Bitsight
Press · 04 Dec 2025, 08:00 · CVE-2025-66478, CVE-2025-55182 React2Shell Exploits: Details - Bitsight
Rescana
Press · 24 Nov 2025, 08:00 · Cox Enterprises Data Breach: Cl0p Ransomware Exploits Oracle E-Business Suite Zero-Day Vulnerability (CVE-2025-61882) - Rescana
CyberSecurityNews
Press · 21 Nov 2025, 08:00 · Oracle Allegedly Breached by Clop Ransomware via E-Business Suite 0-Day Hack - CyberSecurityNews
Check Point Research
Press · 17 Nov 2025, 08:00 · 17th November – Threat Intelligence Report - Check Point Research
Bitsight
Press · 14 Nov 2025, 08:00 · Security Alert: CVE-2025-64446 Fortinet FortiWeb Actively Exploited - Bitsight
Recorded Future
Press · 06 Nov 2025, 08:00 · October 2025 CVE Landscape: 32 High-Impact Vulnerabilities Demand Immediate Attention - Recorded Future
SecurityWeek
Press · 21 Oct 2025, 07:00 · CISA Confirms Exploitation of Latest Oracle EBS Vulnerability - SecurityWeek
Security Affairs
Press · 14 Oct 2025, 07:00 · Oracle issued an emergency security update to fix new E-Business Suite flaw CVE-2025-61884 - Security Affairs
SOC Prime
Press · 13 Oct 2025, 07:00 · CVE-2025-61884: Novel Oracle E-Business Suite Vulnerability Enables Remote Theft of Sensitive Data Without Login - SOC Prime
Cybersecurity Dive
Press · 10 Oct 2025, 07:00 · Oracle E-Business Suite exploitation traced back as early as July - Cybersecurity Dive
Google Cloud
Press · 09 Oct 2025, 07:00 · Oracle E-Business Suite Zero-Day Exploited in Widespread Extortion Campaign - Google Cloud
SecurityWeek
Press · 08 Oct 2025, 07:00 · Exploitation of Oracle EBS Zero-Day Started 2 Months Before Patching - SecurityWeek
The Hacker News
Press · 07 Oct 2025, 07:00 · Oracle EBS Under Fire as Cl0p Exploits CVE-2025-61882 in Real-World Attacks - The Hacker News
Help Net Security
Press · 07 Oct 2025, 07:00 · Leaked Oracle EBS exploit scripts expected to drive new wave of attacks (CVE-2025-61882) - Help Net Security
watchTowr Labs
Press · 06 Oct 2025, 07:00 · Well, Well, Well. It’s Another Day. (Oracle E-Business Suite Pre-Auth RCE Chain - CVE-2025-61882) - watchTowr Labs
Bitsight
Press · 06 Oct 2025, 07:00 · Critical Vulnerability Alert: CVE-2025-61882 in Oracle E-Business Suite - Bitsight
SecurityWeek
Press · 06 Oct 2025, 07:00 · Oracle E-Business Suite Zero-Day Exploited in Cl0p Attacks - SecurityWeek
Rapid7
Press · 06 Oct 2025, 07:00 · CVE-2025-61882: Critical 0day in Oracle E-Business Suite exploited in-the-wild - Rapid7
SOC Prime
Press · 06 Oct 2025, 07:00 · CVE-2025-61882 Vulnerability Detection: A Critical Oracle E-Business Suite Zero-Day Exploited in Cl0p Data Theft Attacks - SOC Prime
The Hacker News
Press · 06 Oct 2025, 07:00 · Oracle Rushes Patch for CVE-2025-61882 After Cl0p Exploited It in Data Theft Attacks - The Hacker News
Resecurity
Press · 05 Oct 2025, 07:00 · CVE-2025-61882 Mass Exploitation — Oracle E-Business Suite (EBS) Under Attack by Cl0p Ransomware - Resecurity

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 9.0 (2026-11-02 15:14). The curve appears once the score changes.

Public exploit evidence

1

Public exploit entries / repo candidates

See 1 repos with metrics
RepositoryStarsForksLanguageUpdated
MindflareX/CVE-2025-61882-POC00Python03 Jun 2026, 12:46
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 9.8; EPSS 99.7%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:59:43.394995+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
05 Oct 2025, 03:17
First press mention
05 Oct 2025, 07:00
Added to the CISA KEV catalog
06 Oct 2025, 00:00
Latest press mention
21 Jul 2026, 07:00
Score calculated
05 Nov 2026, 13:59
PoCs on GitHub
1 repositories
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar