Description
Oracle E-Business Suite 的 Oracle Configurator 产品允许通过 HTTP 进行网络访问的未经身份验证的攻击者入侵Oracle Configurator。该SSRF漏洞易于利用被直接对内网机器进行盲扫
Oracle_E_Business 存在SSRF（CVE-2025-61884）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.oracle.com/security-alerts/alert-cve-2025-61884.html
https://nvd.nist.gov/vuln/detail/CVE-2025-61884
https://socprime.com/blog/cve-2025-61884-vulnerability-in-oracle-ebs/
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-102/
https://zeropath.com/blog/oracle-ebs-cve-2025-61884-summary
https://www.rapid7.com/db/vulnerabilities/oracle-ebs-cve-2025-61884/
https://www.helpnetsecurity.com/2025/10/12/another-remotely-exploitable-oracle-ebs-vulnerability-requires-your-attention-cve-2025-61884/
https://www.bleepingcomputer.com/news/security/cisa-confirms-hackers-exploited-oracle-e-business-suite-ssrf-flaw/
https://hadrian.io/blog/cve-2025-61884-high-severity-exposure-in-oracle-e-business-suite-ebs
https://www.tenable.com/plugins/nessus/270137
https://arcticwolf.com/resources/blog/cve-2025-61884/