References https://www.oracle.com/security-alerts/alert-cve-2025-61884.html https://nvd.nist.gov/vuln/detail/CVE-2025-61884 https://socprime.com/blog/cve-2025-61884-vulnerability-in-oracle-ebs/ https://zeropath.com/blog/oracle-ebs-cve-2025-61884-summary https://www.tenable.com/plugins/nessus/270137 https://www.rapid7.com/db/vulnerabilities/oracle-ebs-cve-2025-61884/ https://www.secpod.com/blog/cve-2025-61884-unauthenticated-data-exposure-in-oracle-e-business-suite/ https://www.bleepingcomputer.com/news/security/oracle-releases-emergency-patch-for-new-e-business-suite-flaw/ https://arcticwolf.com/resources/blog/cve-2025-61884/ https://www.pentasecurity.com/blog/oracle-e-business-suite-vulnerability-can-result-in-data-access-without-login/
Related VulnerabilitiesPoCharman-media-suite-lfi: Harman Media Suite <= 4.2.0 - Local File DisclosurePoCCVE-2026-35273: Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE力合科技-水质监测系统 /AutoData/Business/Report/WQDataCalculation.aspx/Api/ReportList 文件读取漏洞GoCD Cruise /go/add-on/business-continuity/api/cruise_config 信息泄露漏洞孚盟云CRM BusinessPriceReport.aspx SQL注入漏洞孚盟云 CRM /m/Dingding/Product/BusinessPriceReport.aspx SQL 注入漏洞孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPrice.ashx GetBmailByFid SQL 注入漏洞PoCwyse-devicegroup-register: Dell Wyse Management Suite - Unauthenticated Device RegistrationLVS 精益价值管理系统 /Business/LoginVaild.aspx 文件读取漏洞PoC美特 CRM /business/common/toviewspecial.jsp 文件读取漏洞PoC孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPriceActiveReports.ashx GetTempelateList SQL 注入漏洞PoCCVE-2024-13055: Dyn Business Panel Plugin <= 1.0.0 - Cross-Site ScriptingPoCCVE-2020-9314: Oracle iPlanet Web Server 7.0.x - Image Injection