PoC Released for Remotely Exploitable Oracle E-Business Suite 0-Day

The article reports a PoC for a critical remote code execution zero-day in Oracle E-Business Suite, tracked as CVE-2025-61882, with Oracle warning that it can be exploited remotely over a network without authentication.

It affects Oracle E-Business Suite versions 12.2.3 through 12.2.14 and has a maximum CVSS score of 9.8, with the flaw located in the Oracle Concurrent Processing BI Publisher Integration component and exploiting HTTP. according to Oracle’s security advisory, successful attacks could compromise the entire system, and a Nuclei detection template has been released by security researcher rxerium to identify vulnerable instances, checking for the “E-Business Suite Home Page” text and Last-Modified header dates.

The Last-Modified date threshold is 4 October 2025, and indicators include suspicious IPs 200.107.207[.]26 and 185.181.60[.]11, along with ZIP file and Python exploitation scripts suggesting in-the-wild activity. Oracle emphasises urgent patching, noting the October 2023 Critical Patch Update as a prerequisite for applying emergency fixes, and security teams should conduct immediate scans of Oracle E-Business Suite infrastructure. Retrieved on 6 October 2025.