Vulnerability

CVE-2025-61882

In 4 briefs, most recently 18 November 2025. RSS for this tag

Published 2025-10-05

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Known exploited (CISA KEV)

Oracle E-Business Suite Unspecified Vulnerability.

Added 2025-10-06 · used in ransomware campaigns

Coverage in DanSec Daily

  1. The Oracle E-Business Suite-linked Cl0p breaches including Logitech, Chrome and FortiWeb zero-days, and the record 15.72 Tbps Aisuru DDoS attack on Microsoft …
  2. The Dentsu/Merkle breach, Cl0p's Oracle EBS zero-day attacks on Schneider Electric and Emerson, and TEE.Fail trusted execution attacks.
  3. Red Hat and Discord breaches, Cl0p exploiting an Oracle E-Business Suite zero-day, and a GoAnywhere MFT flaw abused in Medusa ransomware attacks.
  4. Oracle E-Business Suite zero-day CVE-2025-61882 exploited by Cl0p for data theft, plus ParkMobile's $1-per-user breach settlement and a Zimbra CVE-2025-27915 …