CVE-2025-61884 Oracle E-Business Suite
Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication.
- CVSS
- not scored
On CISA’s exploited list
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
- Added
- 2025-10-20
- Federal patch deadline
- 2025-11-10
- Ransomware use
- known