[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_zn9VH5PmEiL6m8u2fE9oCrd7J7ONteh4H5XopwExFQ":3,"g5a-risk:CVE-2025-61884":169},{"success":4,"data":5,"meta":166},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":26,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":40,"references":41,"referencesCount":61,"weaknesses":62,"weaknessesCount":98,"isActivelyExploited":4,"cisaInfo":99,"otxData":26,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":137,"notableEvents":138},"CVE-2025-61884","What is CVE-2025-61884?","Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI).  Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Configurator accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector:","Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14....","2025-10-12T03:15:34.72","2025-10-27T17:08:49.037",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"secalert_us@oracle.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[],[],0.95891,[31,31,31,31,31,31,31],"High",[35],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"oracle","configurator","*","cpe:2.3:a:oracle:configurator:*:*:*:*:*:*:*:*",1,[42,47,50,56],{"url":43,"source":44,"tags":45},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Falert-cve-2025-61884.html","Oracle",[46],"Vendor Advisory",{"url":48,"source":44,"tags":49},"https:\u002F\u002Fblogs.oracle.com\u002Fsecurity\u002Fpost\u002Fapply-july-2025-cpu",[46],{"url":51,"source":52,"tags":53},"https:\u002F\u002Flabs.watchtowr.com\u002Fwell-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882well-well-well-its-another-day-oracle-e-business-suite-pre-auth-rce-chain-cve-2025-61882\u002F","Watchtowr",[54,55],"Exploit","Press\u002FMedia Coverage",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61884","CISA",[60],"US Government Resource",4,[63,71,78,84,89,94],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-22","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","Many file operations are intended to take place within a restricted directory. By using special elements such as \"..\" and \"\u002F\" separators, attackers can escape outside of the restricted location to access files or directories that are elsewhere on the system. One of the most common special elements is the \"..\u002F\" sequence, which in most modern operating systems is interpreted as the parent directory of the current location. This is referred to as relative path traversal. Path traversal also covers the use of absolute pathnames such as \"\u002Fusr\u002Flocal\u002Fbin\" to access unexpected files. This is referred to as absolute path traversal.","Stable","Base","Simple",{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":70},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class",{"id":79,"name":80,"description":81,"extendedDescription":82,"status":83,"abstraction":69,"structure":70},"CWE-918","Server-Side Request Forgery (SSRF)","The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.","By providing URLs to unexpected hosts or ports, attackers can make it appear that the server is sending the request, possibly bypassing access controls such as firewalls that prevent the attackers from accessing the URLs directly. The server can be used as a proxy to conduct port scanning of hosts in internal networks, use other URLs such as that can access documents on the system (using file:\u002F\u002F), or use other protocols such as gopher:\u002F\u002F or tftp:\u002F\u002F, which may provide greater control over the contents of requests.","Incomplete",{"id":85,"name":86,"description":87,"extendedDescription":88,"status":83,"abstraction":69,"structure":70},"CWE-444","Inconsistent Interpretation of HTTP Requests ('HTTP Request\u002FResponse Smuggling')","The product acts as an intermediary HTTP agent\n         (such as a proxy or firewall) in the data flow between two\n         entities such as a client and server, but it does not\n         interpret malformed HTTP requests or responses in ways that\n         are consistent with how the messages will be processed by\n         those entities that are at the ultimate destination.","HTTP requests or responses (\"messages\") can be\n\t   malformed or unexpected in ways that cause web servers or\n\t   clients to interpret the messages in different ways than\n\t   intermediary HTTP agents such as load balancers, reverse\n\t   proxies, web caching proxies, application firewalls,\n\t   etc. For example, an adversary may be able to add duplicate\n\t   or different header fields that a client or server might\n\t   interpret as one set of messages, whereas the intermediary\n\t   might interpret the same sequence of bytes as a different\n\t   set of messages. For example, discrepancies can arise in\n\t   how to handle duplicate headers like two Transfer-encoding\n\t   (TE) or two Content-length (CL), or the malicious HTTP\n\t   message will have different headers for TE and\n\t   CL.\nThe inconsistent parsing and interpretation of messages\n\t   can allow the adversary to \"smuggle\" a message to the\n\t   client\u002Fserver without the intermediary being aware of it.\nThis weakness is usually the result of the usage\n\t   of outdated or incompatible HTTP protocol versions in the\n\t   HTTP agents.",{"id":90,"name":91,"description":92,"extendedDescription":93,"status":76,"abstraction":69,"structure":70},"CWE-501","Trust Boundary Violation","The product mixes trusted and untrusted data in the same data structure or structured message.","A trust boundary can be thought of as line drawn through a program. On one side of the line, data is untrusted. On the other side of the line, data is assumed to be trustworthy. The purpose of validation logic is to allow data to safely cross the trust boundary - to move from untrusted to trusted. A trust boundary violation occurs when a program blurs the line between what is trusted and what is untrusted. By combining trusted and untrusted data in the same data structure, it becomes easier for programmers to mistakenly trust unvalidated data.",{"id":95,"name":96,"description":97,"extendedDescription":75,"status":76,"abstraction":69,"structure":70},"CWE-93","Improper Neutralization of CRLF Sequences ('CRLF Injection')","The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.",6,{"shortDescription":75,"requiredAction":75,"vulnerabilityName":75,"dateAdded":26},[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2025-61884? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2025-61884, a high severity cyber security vulnerability from 2025. High exploit probability (95.9%). Vulnerability in the Orac...","CVE-2025-61884, CVE-2025-61884 vulnerability, CVE-2025-61884 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, oracle security, configurator vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2025-61884",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":10,"dateModified":11,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2025-61884","Cybersecurity","CVE-2025-61884, CVE-2025-61884 vulnerability, CVE-2025-61884 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127],{"Operator":26,"Negate":26,"Nodes":128},[129],{"Operator":130,"Negate":131,"CPEMatch":132},"OR",false,[133],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":135,"VersionEndExcluding":26,"VersionEndIncluding":136},"5CC0EA09-3974-4A14-8724-27020AECB5A8","12.2.3","12.2.14",[],[139,146,153,159],{"id":140,"eventType":141,"eventTime":142,"details":143,"label":144,"color":145},"1f77d4f7-4332-4a76-8c1c-879e73212268","NEW_NVD","2025-10-12T04:01:09.585039+00:00","New CVE added to NVD","Published to NVD","blue",{"id":147,"eventType":148,"eventTime":149,"details":150,"label":151,"color":152},"4aad2693-7739-493a-bd62-8be86d8a22e9","NEW_CISA","2025-10-21T04:01:18.884735+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":154,"eventType":155,"eventTime":156,"details":157,"label":158,"color":152},"6bb98489-0635-4214-9c25-6edb70021f02","HIGH_EPSS_DELTA","2025-10-22T06:41:05.129585+00:00","Daily EPSS score increased by 0.101 on 2025-10-13","EPSS Score Increased",{"id":160,"eventType":161,"eventTime":162,"details":163,"label":164,"color":165},"5b38263d-fbc6-4c3a-b32b-72d226bcf4b4","LOW_EPSS_DELTA","2025-11-22T04:03:23.024802+00:00","Daily EPSS score decreased by 0.103 on 2025-10-13","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":167,"version":168},1793196401162,"2.0",{"score":170,"band":33,"action":171,"scoredAt":172},81,"Emergency patch","2026-10-28T07:10:34.042717+00:00"]