9.8
Critique
CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Campagnes de rançongiciel
Utilisation connue
Description
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concurrent Processing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle Concurrent Processing 12.2 | 12.2.3 → 12.2.14 | Pas de correctif indiqué |
Autres CVE de Oracle Concurrent Processing
Les 7 CVE de Oracle Concurrent Processing →
CVE-2026-101844
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests)
3.1
Faible
CVE-2026-101707
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues)
7.4
Élevée
CVE-2026-101704
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other)
8.2
Élevée
CVE-2026-101701
Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission…
6.0
Moyenne