Improper authentication in Oracle Corporation Oracle Concurrent Processing
CVSS score
9.8
EPSS probability
%99.7
Risk score
19.5
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
CVE Reproduction: cve-2025-61882-oracle_ebs_rce_reproduction
George0Papasotiriou/CVE-2025-61882-Oracle-BI-Publisher-RCE
Sorumluluk Reddi Kendi sorumluluğunuzda kullanın, size ait olmayan veya tarama izninizin olmadığı altyapılarda gerçekleştireceğiniz yasa dışı faaliyetlerden sorumlu olmayacağım.
Detects Oracle E-Business Suite (CVE-2025-61882). Detection: multi-tier checks — fingerprinting, version checks, endpoint & SSRF tests, timing analysis & controlled exploitation 4 high-confidence results. Default = safe fingerprinting only. Set aggressive=true 2 enable active/probing checks use w/caution. Provided By BattalionX BattalionX@proton.me
A critical pre-authentication Remote Code Execution (RCE) flaw in Oracle E-Business Suite (versions 12.2.3 - 12.2.14) allows attackers to gain full control over vulnerable servers via malicious HTTP requests - now actively exploited in the wild.
Detection for CVE-2025-61882 & CVE-2025-61884
zerozenxlabs/CVE-2025-61882-Oracle-EBS
Nuclei: Oracle E-Business Suite 12.2.3–12.2.14 – Remote Code Execution
Similar Vulnerabilities
Vulnerability in Apache Tomcat
Vulnerability in N/a
Vulnerability in N/a
Code injection in Spring By Pivotal Spring Framework
Vulnerability in Oracle Corporation PeopleSoft Enterprise PeopleTools
Vulnerability in N/a
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-61882"