CVE-2025-61884 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14. E…
High KEV CVSS: 7.5

CVE-2025-61884

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Configurator accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Vendor
Oracle
Product
Configurator
CWE
CWE-22
Yayın Tarihi
2025-10-12 03:15:34
Güncelleme
2025-10-27 17:08:49
Source Identifier
secalert_us@oracle.com
KEV Date Added
2025-10-20

Kategoriler

CWE-22 Configurator HIGH Oracle 2025

Referanslar

https://www.oracle.com/security-alerts/alert-cve-2025-61884.html https://blogs.oracle.com/security/post/apply-july-2025-cpu https://labs.watchtowr.com/well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61884