Oracle silently fixes zero-day exploit leaked by ShinyHunters

Oracle E-Business Suite suffered multiple serious vulnerabilities (CVE-2025-61882 and CVE-2025-61884) that were actively exploited or subject to public proof-of-concept leaks; Clop extortion emails and a ShinyHunters-released exploit were linked to these issues. Oracle released out-of-band patches (including fixes that validate return_url to block SSRF and mod_security rules for SyncServlet) but advisories contained mismatched IOCs and incomplete disclosure. Organizations using Oracle EBS are strongly advised to apply the October emergency updates immediately or, as a temporary mitigation, add mod_security rules to block /configurator/UiServlet and related endpoints.