返回 CVE 瀏覽器

CVE-2025-61882

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-10-05

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected Platforms (CPE)

📦

Oracle

Concurrent Processing

>= 12.2.3 and <= 12.2.14

References & Advisories

🔗 https://www.oracle.com/security-alerts/alert-cve-2025-61882.html

🔗 https://blogs.oracle.com/security/post/apply-july-2025-cpu

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61882

🔗 https://www.crowdstrike.com/en-us/blog/crowdstrike-identifies-campaign-targeting-oracle-e-business-suite-zero-day-CVE-2025-61882/

相關資安分析文章

全球網絡威脅情報摘要：2026 年 7 月 21 日

本期威脅情報分析 VMware vCenter、F5 BIG-IP 與 GitLab 關鍵漏洞安全修補警訊，同時彙整最新醫療與關鍵基礎設施平台遭勒索軟體攻擊之防禦防範措施。

全球網絡威脅情報摘要：2026 年 7 月 23 日

本期情報重點包含 CISA 將 Langflow CVE-2026-0770 遠端程式碼執行漏洞列入 KEV 已知利用目錄、Windmill CVE-2026-29059 未經身分驗證路徑穿越漏洞分析，以及 SonicWall SMA1000 零日漏洞利用持續追蹤與防禦建議。

相關漏洞威脅

CVE-2026-124959.2

Denial-of-service (DoS) vulnerability due to a stack buffer overflow in the http_gdpr_decrypt function of the Mercusys MB115-4G de...

CVE-2026-165545.1

cJSON library is vulnerable to an integer overflow in the print_string_ptr() function in cJSON.c on 32-bit platforms. The escape_c...

CVE-2026-174978.3

NoteGen before 0.32.0 grants the Tauri shell plugin shell:allow-execute capability for bash, python, and python3 with arbitrary ar...

CVE-2026-106816.5

In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thread permiss...