CFADVISORY-CL-application-security-waf-waf-release-2025-10-20

Exploit Intelligence

• POC of CVE-2025-61882 (github-poc-repo)
• POC of CVE-2025-61882 (github-poc)
• George0Papasotiriou/CVE-2025-61882-Oracle-BI-Publisher-RCE (github-poc-repo)
• Real-world information security risk assessment based on the Oracle E-Business Suite zero-day (CVE-2025-61882). Analyses attacker methods, enterprise risks, and mitigation strategies using ISO 27001, NIST CSF, Cyber Essentials and COBIT. (github-poc-repo)
• NetVanguard-cmd/CVE-2025-61882 (github-poc-repo)
• 🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats. (github-poc-repo)
• NetVanguard-cmd/CVE-2025-61882 (github-poc)
• Real-world information security risk assessment based on the Oracle E-Business Suite zero-day (CVE-2025-61882). Analyses attacker methods, enterprise risks, and mitigation strategies using ISO 27001, NIST CSF, Cyber Essentials and COBIT. (github-poc)
• George0Papasotiriou/CVE-2025-61882-Oracle-BI-Publisher-RCE (github-poc)
• Sorumluluk Reddi Kendi sorumluluğunuzda kullanın, size ait olmayan veya tarama izninizin olmadığı altyapılarda gerçekleştireceğiniz yasa dışı faaliyetlerden sorumlu olmayacağım. (github-poc)

…and 7 more exploits

Timeline

• Oct 20, 2025 CVE Published

References

• WAF - WAF Release - 2025-10-20 advisory