New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login
Summary: Oracle issued a security alert on Saturday for CVE-2025-61884, a CVSS 7.5 flaw affecting E-Business Suite versions 12.2.3 through 12.2.14 that NIST describes as easily exploitable by an unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Oracle CSO Rob Duhart said the flaw affects some deployments and could be weaponized to access sensitive resources, and Oracle made no mention of exploitation in the wild. The alert follows GTIG and Mandiant disclosure that dozens of organizations may have been impacted by zero-day exploitation of CVE-2025-61882, with exploit chains tied to UiServlet and SyncServlet and malware families GOLDVEIN.JAVA, SAGEGIFT, SAGELEAF, and SAGEWAVE.
What you should know: This is the second E-Business Suite flaw in quick succession, and the first one already drew exploitation that researchers link to actors now running Cl0p-branded operations against dozens of organizations.
Read the original at The Hacker News ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2025-61882CVE-2025-61884
- Related