CVE-2025-61884 1

Vulnerability (CVE)

CVE-2025-61884: Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Oct 20, 2025

Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication.

Vulnerabilities & Patching