CISA Warns of Oracle E-Enterprise Suite SSRF Vulnerability Actively Exploited in Assaults

The Cybersecurity and Infrastructure Safety Company (CISA) has added a essential Oracle E-Enterprise Suite vulnerability to its Identified Exploited Vulnerabilities catalog after detecting energetic exploitation within the wild.

The safety flaw, tracked as CVE-2025-61884, poses important dangers to organizations working the widely-deployed enterprise useful resource planning software program.

CVE-2025-61884 is a server-side request forgery vulnerability affecting the Runtime part of Oracle Configurator inside Oracle E-Enterprise Suite.

The flaw permits distant attackers to use the vulnerability with out requiring any authentication credentials, making it notably harmful for uncovered techniques.

Server-side request forgery assaults allow menace actors to control the server into making unauthorized requests to inside or exterior sources, doubtlessly exposing delicate knowledge or facilitating deeper community penetration.

The vulnerability obtained a CWE-918 classification, which particularly identifies SSRF weaknesses the place purposes fail to validate user-supplied URLs correctly.

Safety researchers warn that attackers exploiting this flaw might bypass community entry controls, work together with inside providers, and doubtlessly exfiltrate confidential data from backend techniques.

The distant exploitability with out authentication makes this vulnerability particularly enticing to cybercriminals looking for straightforward entry factors into company networks.

CISA added CVE-2025-61884 to the Identified Exploited Vulnerabilities catalog on October 20, 2025, signaling confirmed energetic exploitation makes an attempt.

Federal companies working Oracle E-Enterprise Suite installations should apply safety patches or implement vendor-recommended mitigations by November 10, 2025, in response to Binding Operational Directive 22-01.

Organizations unable to remediate the vulnerability inside the specified timeframe ought to discontinue utilizing the affected product till correct protections might be carried out.

Whereas CISA has not but confirmed whether or not this vulnerability has been weaponized in ransomware campaigns, the unknown standing emphasizes the necessity for warning.

Organizations ought to observe relevant BOD 22-01 steerage for cloud providers and coordinate with Oracle to acquire the newest safety updates addressing this essential flaw.

Safety groups managing Oracle E-Enterprise Suite deployments ought to instantly evaluate their installations for publicity to CVE-2025-61884.

Precedence actions embody making use of vendor-supplied patches, implementing community segmentation to restrict potential SSRF exploitation, and monitoring for suspicious outbound requests from Oracle Configurator elements.

Organizations must also conduct thorough safety assessments to determine any indicators of compromise which will recommend prior exploitation makes an attempt.

The addition of this vulnerability to CISA’s catalog underscores the essential significance of sustaining present patch ranges for enterprise purposes and implementing defense-in-depth methods to guard in opposition to rising threats.

Comply with us on Google Information, LinkedIn, and X to Get Immediate Updates and Set GBH as a Most well-liked Supply in Google.