{"id":"CVE-2025-61882","kind":"vulnerability","aliases":["CVE-2025-61882"],"related":[],"title":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher…","description":"Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration).  Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing.  Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","summary":"Oracle E-Business Suite's BI Publisher Integration component has an unspecified flaw that lets an unauthenticated attacker over HTTP take over Oracle Concurrent Processing. CISA lists it as actively exploited, with ransomware use tagged in the catalog.","severity":"critical","cvss":9.8,"epss":null,"exploited":true,"exploited_at":"2025-10-06T00:00:00+00:00","products":[{"name":"Oracle E-Business Suite","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"oracle concurrent processing","fixed":[],"affected":">= 12.2.3, <= 12.2.14","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["bi-publisher","exploited","on-premises","oracle-e-business-suite","ransomware","vendor"],"not_affected_if":["managed-hosting"],"how_to_check":null,"fix":"Apply the mitigations Oracle publishes for CVE-2025-61882; the sources do not name a patched version. If no mitigation is available, CISA says to discontinue use of the product.","status":"open","published_at":"2025-10-05T04:15:40+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:44:36+00:00","updated_at":"2026-10-23T23:44:51+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-10-23T20:44:36Z","model":"claude-haiku-5-5","output":{"fix":"Apply the mitigations Oracle publishes for CVE-2025-61882; the sources do not name a patched version. If no mitigation is available, CISA says to discontinue use of the product.","reach":"internet","summary":"Oracle E-Business Suite's BI Publisher Integration component has an unspecified flaw that lets an unauthenticated attacker over HTTP take over Oracle Concurrent Processing. CISA lists it as actively exploited, with ransomware use tagged in the catalog.","category":"vendor","who_cares":["oracle-e-business-suite","bi-publisher","on-premises"],"confidence":0.7,"needs_auth":"no","worst_case":"Unauthenticated attacker takes over Oracle Concurrent Processing over the network via HTTP.","analyst_note":"Find Oracle's security alert for CVE-2025-61882 to get affected versions, patch level and the exact mitigation steps and detection indicators.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["managed-hosting"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000459,"input_tokens":2592,"output_tokens":399,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2025':18A,21A '-61882':19A,22A '/av':152C '12.2.14':108C '12.2.3':107C '3.1':139C,151C '9.8':142C 'access':117C 'activ':75B 'affect':105C 'allow':112C 'attack':63B,114C,126C 'avail':146C 'base':140C 'bi':15A,32B,51B,98C 'bi-publish':31B 'busi':12A,41B,48B,95C 'business':26A 'catalog':83B 'cisa':71B 'compon':14A,54B,97C 'compromis':121C 'concurr':5A,69B,88C,123C,136C 'concurrent':29A 'confidenti':143C 'cve':17A,20A 'cvss':138C,148C,150C 'e':11A,25A,40B,47B,94C 'e-busi':10A,46B,93C 'e-business':24A 'easili':109C 'exploit':34B,76B,110C 'flaw':58B 'h':160C 'h/a':159C 'h/i':158C 'http':65B,119C 'impact':147C 'integr':53B,100C,144C 'l/pr':154C 'let':60B 'list':72B 'n/ac':153C 'n/s':156C 'n/ui':155C 'network':116C 'on-premis':35B 'oracl':4A,9A,39B,45B,68B,87C,92C,122C,135C 'oracle':23A,28A 'oracle-e-business-suit':38B 'premis':37B 'process':6A,70B,89C,124C,137C 'processing':30A 'product':7A,90C 'publish':16A,33B,52B,99C 'ransomwar':43B,78B 'result':131C 'score':141C 'success':125C 'suit':13A,42B,49B,96C 'suite':27A 'support':101C 'tag':80B 'take':66B 'takeov':133C 'u/c':157C 'unauthent':62B,113C 'unspecifi':57B 'use':79B 'vector':149C 'vendor':44B 'version':102C 'via':118C 'vulner':1A,84C,111C,129C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2025-10-05T04:15:40+00:00","kev":{"dateAdded":"2025-10-06","dueDate":"2025-10-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2025-61882","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-61882","severity":null,"published_at":"2025-10-06T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T15:39:40+00:00","note":null},{"source":"nvd","external_id":"CVE-2025-61882","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61882","severity":null,"published_at":"2025-10-05T04:15:40+00:00","modified_at":"2026-10-09T10:10:00+00:00","first_seen_at":"2026-10-23T23:44:51+00:00","fetched_at":"2026-10-23T23:44:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}