Login Request a demo
OC
Product
Oracle Configurator
by Oracle Corporation · last CVE Apr 21, 2026
On CISA KEVExploited in the wildRansomware-linked
2
CVEs
1
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities2In the news1Timeline
Severity mix
Critical 0High 1Medium 1Low 0
Severity
All severities2Critical0High1Medium1Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Oracle Configurator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-61884
RansomwareIn wildKEV
7.5
96%
Oct 12
Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
Affected: 12.2.3 through 12.2.14
CVE-2026-34274
6.1
0%
Apr 21
Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: User Interface)
Affected: 12.2.3 through 12.2.15
Showing 2