CO
Product
Configurator
On CISA KEVExploited in the wildRansomware-linked
17
CVEs
1
On KEV
8.2
Max CVSS
0
New 30D
VulnerabilityHigh
[CISA KEV] CVE-2025-61884: Oracle E-Business Suite - Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime component of Oracle Configurator. This vulnerability is remotely exploitable without authentication.
ESE-Business SuiteCVE-2025-61884
Oct 20, 2025·CISA KEV