CVE-2025-53072-CVE-2025-62481

CVE-2025-53072 & CVE-2025-62481 Oracle E-Business Suite 的 Oracle Marketing 产品中存在漏洞（组件：Marketing Administration）。 这种检测方法是如何工作的？ 此 Nuclei 模板通过检查服务器的 Last-Modified 响应头是否表明构建日期早于 2025 年 10 月 21 日（补丁发布日期），并结合识别 E-Business Suite 主页内容以及 200 状态响应，来检测易受 CVE-2025-53072 和 CVE-2025-62481 影响的 Oracle E-Busines...

cve-2025-61882-oracle_ebs_rce_reproduction

CVE-2025-61882 — Oracle E-Business Suite 未认证远程代码执行 CVSS 9.8 严重 概述 CVE-2025-61882 是 Oracle E-Business Suite（EBS）中一个无需认证即可远程执行代码的漏洞，影响并发处理和 BI Publisher 组件。该漏洞允许未经认证的攻击者通过 HTTP 网络访问完全攻破目标系统。该漏洞已被包括 Clop 勒索软件团伙在内的多个组织在野外利用，并于 2025 年 10 月被添加到 CISA 已知被利用漏洞（KEV）目录中。 技术细节 该漏洞存在于 Oracle EBS 处理并发处理/BI...

Oracle E-Business Suite <=12.2 - Authentication Bypass

Oracle E-Business Suite component: Manage Proxies 12.1 and 12.2 are susceptible to an easily exploitable vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise it by self-registering for an account. Successful attacks of this vulnerability can result in...

Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect

The Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc. is impacted by open redirect issues in versions 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. These easily exploitable vulnerabilities allow unauthenticated attackers...

CVE-2026-46817

🚨 CVE-2026-46817 - 关键远程代码执行 Oracle E-Business Suite – Oracle Payments（文件传输） 影响Oracle Payments（文件传输）的关键未认证远程漏洞，可能通过HTTP完全攻破该应用。 📌 概述 CVE-2026-46817 是 Oracle E-Business Suite 中 Oracle Payments 组件的一个 关键 漏洞。该缺陷影响 文件传输 功能，可通过 HTTP 远程利用，无需认证 。 成功利用后，攻击者可完全攻破易受攻击的 Oracle Payments 应用，导致以下全部损失： 🔓 保密性 ✏️ 完整...

CVE-2025-61882-Oracle-EBS

Oracle E-Business Suite — CVE-2025-61882 इस रिपॉजिटरी में ZeroZenX के शोध आर्टिफैक्ट और CVE-2025-61882 के लिए एक पूर्ण रूप से कार्यशील एक्सप्लॉइट इम्प्लीमेंटेशन शामिल है, जो केवल अधिकृत वातावरणों में रक्षात्मक शोध, इंसिडेंट रिस्पॉन्स, डिटेक्शन इंजीनियरिंग और पैच सत्यापन का समर्थन करने के लिए प्रद...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle ha appena divulgato una nuova vulnerabilità CVE-2025-61884; lo script di rilevamento per tale vulnerabilità si trova in questo repository o in originale qui:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. Come riportato dall'avviso di...

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882

watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882 Oracle E-Business Suite CVE-2025-61882 के लिए डिटेक्शन आर्टिफैक्ट जनरेटर तकनीकी विवरण के लिए हमारा ब्लॉग पोस्ट देखें डिटेक्शन का प्रदर्शन root@kitploit: python3 watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py --command 'bash -i &...

Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study

Informationssicherheit: DSGVO-Compliance & Incident Response Ein umfassendes Sicherheits- und Datenschutz-Compliance-Framework für Hochrisiko-Biometrie-Überwachungssysteme CCTV, Gesichtserkennungstechnologie und zentralisierte Kontaktverfolgung, einschließlich vergleichender Framework-Analyse ISO...

CVE-2025-61882

Scanner RCE per Oracle E-Business Suite CVE-2025-61882 Uno scanner bulk veloce e multi-thread per rilevare CVE-2025-61882 nelle installazioni di Oracle E-Business Suite. Questa vulnerabilità critica consente l'esecuzione remota di codice non autenticata. 🎯 Funzionalità Scansione Bulk - Elabora...

Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution

Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...

Blackash-CVE-2025-61884

CVE-2025-61884 Nuovo bug di Oracle E-Business Suite potrebbe consentire agli hacker di accedere ai dati senza login 💀 CVE-2025-61884 — Riepilogo completo 🧾💥...

http-oracle-ebs-cve-2025-61882.nse

http-oracle-ebs-cve-2025-61882.nse Detecta o Oracle E-Business Suite CVE-2025-61882. Detecção: verificações em múltiplas camadas — fingerprinting, verificações de versão, testes de endpoint e SSRF, análise de tempo e exploração controlada para 4 resultados de alta confiança. Padrão = apenas...

Blackash-CVE-2025-61882

🛡️🚨 CVE‑2025‑61882 — Esecuzione Remota di Codice Critica Pre‑Autenticazione in Oracle E‑Business Suite EBS 🚨🛡️ Riepilogo breve: Esecuzione remota di codice critica pre‑autenticazione in Oracle E‑Business Suite EBS — interessa le versioni 12.2.3 → 12.2.14, CVSS 9.8 , sfruttata attivamente in natura...

CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit

CVE-2025-61882 - Exploit RCE Pre-Auth Oracle E-Business Suite Una vulnerabilità critica di Remote Code Execution RCE pre-autenticazione in Oracle E-Business Suite versioni 12.2.3–12.2.14 consente agli attaccanti di ottenere il pieno controllo dei server vulnerabili tramite richieste HTTP malevole...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 AGGIORNAMENTO: Oracle ha appena divulgato una nuova vulnerabilità CVE-2025-61884, lo script di rilevamento per tale vulnerabilità può essere trovato in questo repository o originalmente qui:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. Come cita...

Oracle E-Business Suite (August 2026 CSPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affecte...

CVE-2026-61231

creationtimestamp| type| source ---|---|--- 2026-08-19 17:18:55+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10 2026-08-23 01:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtplyjd3a62y...

vulnerabilities present in Oracle E-Business Suite

Oracle has identified vulnerabilities in various components of the Oracle E-Business Suite, including General Ledger, Payments, Workflow, Sales, Purchasing, Call Center Technology, and other modules within versions 12.2.3 through 12.2.15. These vulnerabilities enable attackers with low to high...

CVE-2026-71104

Vulnerability in the Oracle HRMS Netherlands product of Oracle E-Business Suite component: Netherlands Payroll. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle HRMS...