{"basis":"claimed","id":"CVE-2025-61882","name":"Oracle E-Business Suite Unspecified Vulnerability","vendorProject":"Oracle","product":"E-Business Suite","publishedAt":"2025-10-05","cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"exploited":{"kevAdded":"2025-10-06","dueDate":"2025-10-27","ransomware":true},"epss":{"score":0.99728,"percentile":0.99953,"date":"2026-11-02"},"coverage":{"cloudflare":{"status":"blocks","firstOn":"2025-10-06","daysToRule":1},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"no_history","firstOn":null,"daysToRule":null},"f5":{"status":"rule","firstOn":"2025-12-03","daysToRule":59},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}},"title":null,"description":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration).  Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing.  Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","cwes":[],"vendors":[{"vendor":"cloudflare","status":"blocks","basis":"claimed","firstOn":"2025-10-06","firstIsNew":true,"daysToRule":1,"daysAtMost":null,"freePlan":false,"claims":[{"id":"52a1c43a08eb3f4eb1e671e06185a7c0f829ab9d09bcf5f1f76309b4a8882706","cve_id":"CVE-2025-61882","vendor":"cloudflare","product":"Cloudflare Managed Ruleset","rule_id":"42fbc8c09ec84578b9633ffc31101b2f","rule_name":"Oracle E-Business Suite - Remote Code Execution - CVE:CVE-2025-61882","change":"new","default_action":"Block","published_on":"2025-10-06","source_url":"https://developers.cloudflare.com/changelog/post/2025-10-06-waf-release/","source_title":"WAF Release - 2025-10-06","excerpt":"Oracle E-Business Suite - Remote Code Execution - CVE:CVE-2025-61882. Previous action: N/A. New action: Block. This is a New Detection","first_seen_at":"2026-11-02T21:00:15.788Z"},{"id":"40e35ef458adc6a34512146ebc59bea54d054c1d2294803568223623224825b0","cve_id":"CVE-2025-61882","vendor":"cloudflare","product":"Cloudflare Managed Ruleset","rule_id":"185b5df42d1e44e0aeb8f8b8a1118614","rule_name":"Oracle E-Business Suite - Remote Code Execution - CVE:CVE-2025-61882 - 2","change":"new","default_action":"Block","published_on":"2025-10-20","source_url":"https://developers.cloudflare.com/changelog/post/2025-10-20-waf-release/","source_title":"WAF Release - 2025-10-20","excerpt":"Oracle E-Business Suite - Remote Code Execution - CVE:CVE-2025-61882 - 2. Previous action: Log. New action: Block. This is a New Detection","first_seen_at":"2026-11-02T21:00:15.788Z"}]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"no_history","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"rule","basis":"claimed","firstOn":"2025-12-03","firstIsNew":true,"daysToRule":59,"daysAtMost":null,"freePlan":false,"claims":[{"id":"3eae764d25e38428f73b0a26263fdb5a43fb32ccf3e33304cf0d0f43d5a07bee","cve_id":"CVE-2025-61882","vendor":"f5","product":"Attack signatures","rule_id":"200204035","rule_name":"Oracle EBS Unauthenticated RCE (2)","change":"new","default_action":null,"published_on":"2025-12-03","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Added: signature 200204035 \"Oracle EBS Unauthenticated RCE (2)\" (Server Side Code Injection, risk High), systems: Oracle. References: CVE-2025-61882.","first_seen_at":"2026-11-02T21:00:25.505Z"},{"id":"ea2a2bcfbe97106ab1ddc58969386b728744aebebe8fb72a1f7e9002a5e5e0fa","cve_id":"CVE-2025-61882","vendor":"f5","product":"Attack signatures","rule_id":"200204035","rule_name":"Oracle EBS Unauthenticated RCE (2)","change":"updated","default_action":null,"published_on":"2026-01-20","source_url":"https://docs.cloud.f5.com/docs-v2/platform/changelogs/security-details-changelog","source_title":"F5 Distributed Cloud attack signatures changelog","excerpt":"Updated: signature 200204035 \"Oracle EBS Unauthenticated RCE (2)\" (Server Side Code Injection, risk High), systems: Oracle. References: CVE-2025-61882.","first_seen_at":"2026-11-02T21:00:24.865Z"}]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-02T23:17:40.939Z","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","ssvc":{"exploitation":"active","automatable":"yes","technicalImpact":"total"},"measured":[{"engineId":"owasp-crs","engineName":"OWASP Core Rule Set","engineVersion":"4.25.0","runtime":"Coraza v3.8.1","config":"paranoia level 1, anomaly threshold 5, default CRS settings","ranAt":"2026-11-02T13:02:57.000Z","verdict":"blocked","templateId":"CVE-2025-61882","templatePath":"http/cves/2025/CVE-2025-61882.yaml","requests":2,"blockedRequests":2,"rules":["920420","921130","930100","930110","934110","941100","941160"],"note":"","requestDetail":[{"method":"POST","path":"/OA_HTML/SyncServlet","status":403,"blocked":true,"rules":["920420","921130","934110","941100","941160"]},{"method":"GET","path":"/OA_HTML/help/../ieshostedsurvey.jsp","status":403,"blocked":true,"rules":["930100","930110"]}]},{"engineId":"owasp-crs","engineName":"OWASP Core Rule Set","engineVersion":"4.25.0","runtime":"Coraza v3.8.1","config":"paranoia level 2, anomaly threshold 5, default CRS settings","ranAt":"2026-11-02T13:03:28.000Z","verdict":"blocked","templateId":"CVE-2025-61882","templatePath":"http/cves/2025/CVE-2025-61882.yaml","requests":2,"blockedRequests":2,"rules":["920420","921130","930100","930110","931130","934110","941100","941160","941320","941340","942120","942131","942430"],"note":"","requestDetail":[{"method":"POST","path":"/OA_HTML/SyncServlet","status":403,"blocked":true,"rules":["920420","921130","931130","934110","941100","941160"]},{"method":"GET","path":"/OA_HTML/help/../ieshostedsurvey.jsp","status":403,"blocked":true,"rules":["930100","930110"]}]}],"social":{"total":0,"first_seen":null,"daily":[{"day":"2026-10-20","posts":0},{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":0}],"top_posts":[],"exploit_repositories":[]}}