🔴 HIGHvulnerability

CVE-2025-61884 Oracle EBS - Unauth Data Access via Configurator

Oracle warned of CVE-2025-61884 (CVSS 7.5) affecting EBS 12.2.3–12.2.14, allowing unauthenticated HTTP access to Oracle Configurator and potential exposure of critical data; patching urged.

CVEs

CVE-2025-61884CVE-2025-61882

Vendors

Oracle

Threats

Data exposure

Targets

Oracle E-Business Suite