Oracle E-Business Suite Unspecified Vulnerability

High Listed in CISA KEV

CVECVE-2025-61882

First seen2025-10-06 00:00 UTC

Disclosed2025-10-06 00:00 UTC

Last updated2026-07-15 01:15 UTC

Channel statuspending_review

Summary

Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Oracle:E-Business Suite

Sources

CISA KEV DATABASE

Original Links

https://nvd.nist.gov/vuln/detail/CVE-2025-61882 advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog kev
https://www.oracle.com/security-alerts/alert-cve-2025-61882.html reference

Timeline

2025-10-06 kev_added CISA KEV
2026-07-15 kev_ingest CISA KEV