InfoSecBulletin Cybersecurity for mankind
Oracle released an emergency security update over the weekend to fix a new vulnerability in E-Business Suite (EBS) that could allow remote access by unauthorized attackers.
CVE-2025-61884 is an information disclosure vulnerability in the Runtime UI component, impacting EBS versions 12.2.3 to 12.2.14. It could enable unauthorized attackers to remotely steal sensitive data if exploited.
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
“This vulnerability is remotely exploitable without authentication, i.e., it may be exploited over a network without the need for a username and password. Oracle strongly recommends that customers apply the updates or mitigations provided by this Security Alert as soon as possible,” Oracle said.
“This vulnerability has received a CVSS Base Score of 7.5. If successfully exploited, this vulnerability may allow access to sensitive resources, added Rob Duhart, Oracle’s Chief Security Officer.
Oracle issued a patch for CVE-2025-61884 shortly after a Clop extortion campaign that targeted executives at various companies, which was later associated with vulnerabilities in EBS patched in July 2025 and another Oracle EBS vulnerability known as CVE-2025-61882.
CrowdStrike reported that they first detected Clop exploiting CVE-2025-61882 in early August during data theft attacks.
WatchTowr Labs security researchers discovered that CVE-2025-61882 is a vulnerability that lets unverified attackers execute code remotely. This was shown by a leaked proof-of-concept exploit from May 2025 by the Scattered Lapsus$ Hunters cybercrime group.
The Clop extortion group was responsible for major data thefts involving zero-days in Accellion FTA, GoAnywhere MFT, Cleo, and MOVEit Transfer, which affected more than 2,770 organizations.
Oracle has not tagged the CVE-2025-61884 vulnerability patched over the weekend as exploited in the wild, and has yet to link it to CVE-2025-61882 attacks.
Defenders should urgently apply the out-of-band CVE-2025-61884 patch due to active targeting of internet-facing Oracle EBS instances.
