Vulnerability

CVE-2025-61884

In 2 briefs, most recently 22 October 2025. RSS for this tag

Published 2025-10-12

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Known exploited (CISA KEV)

Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability.

Added 2025-10-20 · used in ransomware campaigns

Coverage in DanSec Daily

  1. The PassiveNeuron espionage campaign, the actively exploited Oracle E-Business Suite SSRF flaw (CVE-2025-61884), and a WatchGuard Firebox RCE flaw affecting …
  2. Prince Group crypto seizure, Harvard breached via Oracle E-Business Suite zero-day CVE-2025-61884, and Flax Typhoon ArcGIS backdoor campaign.