Black Friday60% off BLACKFRIDAY2026
Platform
PlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE

CVE-2025-61884

7.5
CVSShigh
Exploitable remotely over the internet · no authentication required.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
oracle configurator
Updated Nov 10, 2026View on NVD →
S4E scanner

Oracle E-Business Suite - Server-Side Request Forgery

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. References: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61884 https://nvd.nist.gov/vuln/detail/CVE-2025-61884 https://www.oracle.com/security-alerts/alert-cve-2025-61884.html https://arcticwolf.com/resources/blog/cve-2025-61884/ https://github.com/Kazgangap/cve-poc-garage/blob/main/2025/CVE-2025-61884.md

Used 20 times · 10 assets checked · domain, subdomain, ipv4

CVE history: oracle configurator

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →