sign in--:--:--UTC

CVE-2025-61882

exploited in the wild☆ pin

CVSS

9.8

Reports

8

First seen

Oct 8, 2025

Last seen

Jul 21, 2026

Affected product

Oracle E-Business Suite

Associated actors

Clop ×4 ShinyHunters ×2 Curious Serpens ×1 Salt Typhoon ×1 Scattered Spider ×1 SheldIO ×1 ShinyHunter ×1 Storm-0501 ×1 UNC4841 ×1 APT28 ×1 Void Blizzard ×1 APT 41 ×1

Recent reports

Estée Lauder discloses data breach via Oracle E-Business flaw

Bleeping ComputerJul 21, 2026 Critical

Over 900 Oracle E-Business Suite instances exposed to ongoing CVE-2026-46817 attacks

Bleeping ComputerJul 1, 2026 Critical

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild

The Hacker NewsJun 30, 2026 Critical

Hackers now exploit critical Oracle E-Business flaw in attacks

Bleeping ComputerJun 29, 2026 High

2025 Cloud Threat Hunting and Defense Landscape

Recorded Future InsiktFeb 19, 2026 Critical

Oracle E-Business Suite High-Risk XSLT Injection Vulnerability (CVE-2025-61882)

NICS TaiwanOct 17, 2025 High

Risky Business #810 — Data extortion attacks have a silver lining

Risky BusinessOct 15, 2025 Critical

CVE-2025-61882: Oracle E-Business Suite Remote Code Execution Vulnerability

GovCERT.HKOct 8, 2025

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans