References https://www.oracle.com/security-alerts/alert-cve-2025-61882.html https://blog.nsfocus.net/oracle-e-business-suite/ https://www.secrss.com/articles/83778 https://github.com/AdityaBhatt3010/CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit https://www.cup.edu.cn/nic/wlaq/5e264dfada1f40a98d14d49c26b106d5.htm https://avd.aliyun.com/detail?id=AVD-2025-30727 https://www.venustech.com.cn/new_type/aqtg/20251009/28872.html https://stack.chaitin.com/vuldb/detail/610d3d6d-9edf-48a4-958c-3d08c9683d4f https://cloud.tencent.com/developer/article/2600019 https://www.tenable.com/blog/cve-2025-61882-faq-oracle-e-business-suite-zero-day-cl0p-and-july-2025-cpu
Related VulnerabilitiesPoCharman-media-suite-lfi: Harman Media Suite <= 4.2.0 - Local File DisclosurePoCCVE-2026-35273: Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE力合科技-水质监测系统 /AutoData/Business/Report/WQDataCalculation.aspx/Api/ReportList 文件读取漏洞GoCD Cruise /go/add-on/business-continuity/api/cruise_config 信息泄露漏洞孚盟云CRM BusinessPriceReport.aspx SQL注入漏洞孚盟云 CRM /m/Dingding/Product/BusinessPriceReport.aspx SQL 注入漏洞孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPrice.ashx GetBmailByFid SQL 注入漏洞PoCwyse-devicegroup-register: Dell Wyse Management Suite - Unauthenticated Device RegistrationLVS 精益价值管理系统 /Business/LoginVaild.aspx 文件读取漏洞PoC美特 CRM /business/common/toviewspecial.jsp 文件读取漏洞PoC孚盟云CRM /m/Dingding/Ajax/AjaxBusinessPriceActiveReports.ashx GetTempelateList SQL 注入漏洞PoCCVE-2024-13055: Dyn Business Panel Plugin <= 1.0.0 - Cross-Site ScriptingPoCCVE-2020-9314: Oracle iPlanet Web Server 7.0.x - Image Injection