Oracle E-Business Suite RCE Zero-day
ID: 3d7f45cb-6593-58f6-9d1f-1f961ab678cc
STIX ID: report--3d7f45cb-6593-58f6-9d1f-1f961ab678cc
Feed Name: FortiGuard Labs | FortiGuard Center - Outbreak Alerts
Threat Score
CVE-2025-61882 is a critical (CVSS 9.8) unauthenticated remote code execution vulnerability in the BI Publisher integration of Oracle E-Business Suite’s Concurrent Processing component that is being actively exploited as a zero-day in data theft and extortion campaigns linked to the Cl0p ransomware group; Oracle has released an out-of-band patch and immediate patching or compensating controls are strongly recommended for all vulnerable EBS deployments.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.