sign in--:--:--UTC

CVE-2025-61882

exploited in the wild

CVSS

—

Reports

4

First seen

Oct 8

Last seen

Feb 19

Affected product

Oracle E-Business Suite 12.2.3 to 12.2.14

Associated actors

APT28 ×1 APT41 ×1 Clop ×1 Curious Serpens ×1 Salt Typhoon ×1 Scattered Spider ×1 SheldIO ×1 ShinyHunters ×1 Storm-0501 ×1 UNC4841 ×1 Void Blizzard ×1

Recent reports

2025 Cloud Threat Hunting and Defense Landscape

Recorded Future InsiktFeb 19 Critical

Oracle E-Business Suite High-Risk XSLT Injection Vulnerability (CVE-2025-61882)

NICS TaiwanOct 17 High

Risky Business #810 — Data extortion attacks have a silver lining

Risky BusinessOct 15 Critical

CVE-2025-61882: Oracle E-Business Suite Remote Code Execution Vulnerability

GovCERT.HKOct 8

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans