CVE-2025-61884

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-61884
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61884.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-61884
Published
2025-10-12T03:15:34.720Z
Modified
2026-03-13T21:54:17.024242Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Configurator accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

References

Affected packages

Git /

Affected ranges

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61884.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "12.2.3"
            },
            {
                "last_affected": "12.2.14"
            }
        ]
    }
]