References https://www.ddpoc.com/DVB-2025-10113.html https://blackhat.com/docs/us-16/materials/us-16-Litchfield-Hackproofing-Oracle-eBusiness-Suite-wp-4.pdf https://www.hkcert.org/tc/security-bulletin/oracle-e-business-suite-information-disclosure-vulnerability_20251013 https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/10d6ca28-add1-403f-bf3e-7cac14bb08a3/ https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=12331 https://www.twcert.org.tw/tw/cp-104-10457-c017e-1.html https://www.ctfiot.com/273397.html https://download.xray.cool/vul/453vul.pdf https://www.oracle.com/security-alerts/alert-cve-2025-61884.html https://thehackernews.com/2025/10/new-oracle-e-business-suite-bug-could.html https://cloud.google.com/blog/topics/threat-intelligence/oracle-ebusiness-suite-zero-day-exploitation https://www.akto.io/test/oracle-ebs-credentials-disclosure https://s4e.io/tools/oracle-ebs-credentials-exposure-scanner
Related VulnerabilitiesPoCharman-media-suite-lfi: Harman Media Suite <= 4.2.0 - Local File DisclosurePoCCVE-2026-35273: Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE力合科技-水质监测系统 /AutoData/Business/Report/WQDataCalculation.aspx/Api/ReportList 文件读取漏洞GoCD Cruise /go/add-on/business-continuity/api/cruise_config 信息泄露漏洞孚盟云CRM BusinessPriceReport.aspx SQL注入漏洞孚盟云 CRM /m/Dingding/Product/BusinessPriceReport.aspx SQL 注入漏洞孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPrice.ashx GetBmailByFid SQL 注入漏洞PoCwyse-devicegroup-register: Dell Wyse Management Suite - Unauthenticated Device RegistrationLVS 精益价值管理系统 /Business/LoginVaild.aspx 文件读取漏洞PoC美特 CRM /business/common/toviewspecial.jsp 文件读取漏洞PoC孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPriceActiveReports.ashx GetTempelateList SQL 注入漏洞PoCCVE-2024-13055: Dyn Business Panel Plugin <= 1.0.0 - Cross-Site ScriptingPoCCVE-2020-9314: Oracle iPlanet Web Server 7.0.x - Image Injection