CVE-2025-61882
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
10/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.
CISA Known Exploited Vulnerability
Vendor / Product
Oracle — E-Business Suite
Date Added
2025-10-06
Remediation Due
2025-10-27
Ransomware Use
CONFIRMED
https://www.oracle.com/security-alerts/alert-cve-2025-61882.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-61882
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| oracle | concurrent_processing | 12.2.3 – 12.2.14 |
References & Advisories (4)
Vendor Advisory
Vendor Advisory
US Government Resource
Press/Media Coverage