This week’s release introduces a new detection signature that enhances coverage for a critical vulnerability in Oracle E-Business Suite, tracked as CVE-2025-61884.
Key Findings
The flaw is easily exploitable and allows an unauthenticated attacker with network access to compromise Oracle Configurator, which can grant access to sensitive resources and configuration data. The affected versions include 12.2.3 through 12.2.14.
Impact
Successful exploitation of CVE-2025-61884 may result in unauthorized access to critical business data or full exposure of information accessible through Oracle Configurator. Administrators are strongly advised to apply vendor’s patches and recommended mitigations to reduce this exposure.
| Ruleset | Rule ID | Legacy Rule ID | Description | Previous Action | New Action | Comments |
|---|---|---|---|---|---|---|
| Cloudflare Managed Ruleset | 2749f13f8cb34a3dbd49c8c48827402f | N/A | Oracle E-Business Suite – SSRF – CVE:CVE-2025-61884 | N/A | Block | This is a New Detection |
Source: Cloudflare
Latest Posts
- (Updated) Microsoft Teams: Distinguish invites among Attendee, Presenter, and Co-organizer emails [MC1009930]
- Microsoft SharePoint: Retirement of IDCRL authentication protocol and enforcement of OpenID Connect and OAuth protocols [MC1184649]
- (Updated) Microsoft Teams: Meeting Participants Can Request Collaborative Annotation Sessions [MC1019312]
- (Updated) Microsoft 365 Copilot Mobile App: Capability to drive awareness via Notifications on M365 Admin Center [MC1308856]
