New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login
Oracle warned of a new security vulnerability affecting its E-Business Suite on Saturday, claiming that it could permit unauthorized access to private information.
The vulnerability, identified as CVE-2025-61884, has a high severity CVSS score of 7.5. Versions 12.2.3 through 12.2.14 are impacted.
NIST's National issue Database (NVD) describes the issue as "an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise Oracle Configurator." "Either full access to all Oracle Configurator available data or unauthorized access to vital data could arise from successful attacks on this vulnerability.
Oracle stated in a stand-alone notice that customers should install the update immediately because the vulnerability can be remotely...