Oracle E-Business Suite Zero-Day Exploited by Cl0p Ransomware Group (CVE-2025-61882)

On October 4, Oracle published a Security Alert Advisory for a zero-day in its E-Business Suite (EBS) solution:

CVE	Description	CVSSv3
CVE-2025-61882	Oracle Concurrent Processing Remote Code Execution Vulnerability	9.8

This vulnerability was reportedly exploited in the wild by the Cl0p ransomware group. It followed earlier reports of extortion emails being sent to EBS customers by the Cl0p ransomware group. Initially, Oracle indicated that attacks used flaws in Oracle’s July 2025 CPU release.

For more information about this zero-day vulnerability and associated vulnerabilities, including the availability of patches and Tenable product coverage, please visit our blog.