Cybersecurity and Infrastructure Security Agency^Bio confirms exploitation of Oracle E-Business Suite CVE-2025-61884

Summary

Bottom line: the flaw was added to the Known Exploited Vulnerabilities catalog after confirmed in-the-wild abuse following the earlier zero-day campaign. Treat catalog additions as a patch deadline, not a notification.

Key claims· extracted from reporting

• Bottom line: the flaw was added to the Known Exploited Vulnerabilities catalog after confirmed in-the-wild abuse following the earlier zero-day campaign.Low · 20%
  action verbnamed entity×2
  - Source: BleepingComputer
• Treat catalog additions as a patch deadline, not a notification.Low · 10%
  named entity
  - Source: BleepingComputer

Heuristic extraction, verify against the original report before citing.

Tags· click to alert

1. Jul 22, 2025·criticalMicrosoft Threat Intelligence

   Microsoft attributes on-premises SharePoint exploitation to Chinese state actors
2. Oct 9, 2025·criticalGoogle Threat Intelligence Group / Mandiant

   Google Threat Intelligence Group and Mandiant document Oracle E-Business Suite zero-day extortion
3. Oct 21, 2025·highSecurityWeek

   SecurityWeek: Oracle E-Business Suite flaw exploited across dozens of customer environments
4. Oct 21, 2025·highcurrentBleepingComputer

   Cybersecurity and Infrastructure Security Agency^Bio confirms exploitation of Oracle E-Business Suite CVE-2025-61884