Rob Duhart

Oracle issues emergency patch for critical E-Business Suite flaw tied to Cl0p attacks

Cybercrime, News, Risk, Vendors, Vulnerabilities

October 7, 2025

Oracle issued an emergency update for a critical E-Business Suite vulnerability, CVE-2025-61882 (CVSS 9.8), which the article said has been exploited in recent Cl0p data thefts; Oracle and Mandiant have urged organisations to apply fixes and investigate possible prior compromise.