Summary
Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.
- Vendor
- Oracle
- Product
- E-Business Suite
- Added to KEV
- Oct 6, 2025
- Remediation due
- Oct 27, 2025 (US federal deadline)
- Ransomware use
- Known
- EPSS
- 99.7% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References