Oracle Configurator vulnerabilities

2 known vulnerabilities in Oracle Configurator from Oracle. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle E-Business Suite Server-Side Request Forgery (SSRF) Exploited

  CVE-2025-61884Oct 12, 2025OracleEPSS 95.9%

  Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compr

• 7.5 High severity

  Oracle Configurator: Improper Access Control

  CVE-2025-30728Apr 15, 2025Oracle

  Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise