CVE-2025-61882
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
- Published Oct 5, 2025
- CVSS 9.8 critical
- 99.7% chance of exploitation in the next 30 days (EPSS)
- In CISA's Known Exploited Vulnerabilities catalog
- A Metasploit module exploits it
Affected software
In the news
- ShinyHunters Hacked Cl0p. Now What About Cl0p's Victims? Dark Reading ·
- A brief overview of the main incidents in industrial cybersecurity. Q4 2025 Kaspersky ICS CERT ·
- VulnCheck Research Highlights: October 2025 VulnCheck Blog ·
- Oracle E-Business Suite CVE-2025-61882 Exploited in Extortion Attacks VulnCheck Blog ·