InfoSecBulletin Cybersecurity for mankind
Oracle released an emergency security update over the weekend to fix a new vulnerability in E-Business Suite (EBS) that could allow remote access by unauthorized attackers.
CVE-2025-61884 is an information disclosure vulnerability in the Runtime UI component, impacting EBS versions 12.2.3 to 12.2.14. It could enable unauthorized attackers to remotely steal sensitive data if exploited.
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
“This vulnerability is remotely exploitable without authentication, i.e., it may be exploited over a network without the need for a username and password. Oracle strongly recommends that customers apply the updates or mitigations provided by this Security Alert as soon as possible,” Oracle said.
“This vulnerability has received a CVSS Base Score of 7.5. If successfully exploited, this vulnerability may allow access to sensitive resources, added Rob Duhart, Oracle’s Chief Security Officer.
Oracle issued a patch for CVE-2025-61884 shortly after a Clop extortion campaign that targeted executives at various companies, which was later associated with vulnerabilities in EBS patched in July 2025 and another Oracle EBS vulnerability known as CVE-2025-61882.
CrowdStrike reported that they first detected Clop exploiting CVE-2025-61882 in early August during data theft attacks.
WatchTowr Labs security researchers discovered that CVE-2025-61882 is a vulnerability that lets unverified attackers execute code remotely. This was shown by a leaked proof-of-concept exploit from May 2025 by the Scattered Lapsus$ Hunters cybercrime group.
The Clop extortion group was responsible for major data thefts involving zero-days in Accellion FTA, GoAnywhere MFT, Cleo, and MOVEit Transfer, which affected more than 2,770 organizations.
Oracle has not tagged the CVE-2025-61884 vulnerability patched over the weekend as exploited in the wild, and has yet to link it to CVE-2025-61882 attacks.
Defenders should urgently apply the out-of-band CVE-2025-61884 patch due to active targeting of internet-facing Oracle EBS instances.
