CVE-2025-61882

ENISA EUVD: EUVD-2025-32142 ↗

Exploited in the Wild ✓ Confirmed 0-Day

Triaged: March 5, 2026 12 articles

VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

88.25%

probability

This CVE has a 88.25% probability of being exploited in the next 30 days.

0% Top 99.5th percentile of all CVEs 100%

CVSS v3.1

Source: NVD

9.8

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Attack Intelligence

CWE-284 · Improper Access Control CWE-287 · Improper Authentication

Exploits & PoC

George0Papasotiriou/CVE-2025-61882-Oracle-BI-Publisher-RCE

PoC CVE-2025-61882 — George0Papasotiriou/CVE-2025-61882-Oracle-BI-Publisher-RCE

1 repo — triés par ⭐ Rechercher sur GitHub ↗

CISA confirms hackers exploited Oracle E-Business Suite SSRF flaw

BleepingComputer Oct 21, 2025

Oracle silently fixes zero-day exploit leaked by ShinyHunters

BleepingComputer Oct 14, 2025

Oracle patches EBS zero-day exploited in Clop data theft attacks

BleepingComputer Oct 05, 2025

Five New Exploited Bugs Land in CISA's Catalog — Oracle and Microsoft Among Targets

TheHackerNews

American Airlines subsidiary Envoy confirms Oracle data theft attack

BleepingComputer Oct 17, 2025

Clop exploited Oracle zero-day for data theft since early August

BleepingComputer Oct 07, 2025

New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login

TheHackerNews

Harvard investigating breach linked to Oracle zero-day exploit

BleepingComputer Oct 13, 2025

Oracle Rushes Patch for CVE-2025-61882 After Cl0p Exploited It in Data Theft Attacks

TheHackerNews

CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software Flaw

TheHackerNews

ThreatsDay Bulletin: MS Teams Hack, MFA Hijacking, $2B Crypto Heist, Apple Siri Probe & More

TheHackerNews

FBI Reports $262M in ATO Fraud as Researchers Cite Growing AI Phishing and Holiday Scams

TheHackerNews Nov 26, 2025

Signal Intelligence

Confidenceⓘ

92%

EPSS 88.25%

CVSS v3.1 9.8

Mentions 12

Last Seen Nov 26, 2025

CNA Information

Analyst Note

Multiple authoritative sources explicitly confirm exploitation of this Oracle EBS vulnerability in the wild by Clop threat actors since early August 2025, preceding the October 5, 2025 CVE publication. Article titles directly reference 'zero-day' and 'exploited' status, with CISA confirmation of active attacks.