VulnerabilityBleeping Computer
9.8 — CRITICAL
Estée Lauder discloses data breach via Oracle E-Business flaw
Cosmetics giant Estée Lauder is notifying customers of a data breach after hackers exploited a flaw in Oracle E-Business Suite that the company used for human resources (HR) operations. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Estée Lauder disclosed a data breach due to exploitation of a zero-day vulnerability in Oracle E-Business Suite, allowing unauthorized access to personal and sensitive information.
⚙️Technical Details
CVEs
CVE-2025-61882Affected Systems: Oracle E-Business Suite (BI Publisher Integration component)Attack Vectors: NETWORK
Affected Systems
Oracle E-Business Suite (BI Publisher Integration component)
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
🛡️Recommended Actions
1Implement patches for Oracle E-Business Suite (BI Publisher Integration component) as soon as possible.
2Monitor accounts and credit reports for suspicious activity.
3Take advantage of complimentary identity monitoring services offered by Estée Lauder.
📦Affected Products
Oracle Concurrent Processing
🔐NVD Verified DataVERIFIED
CVE-2025-61882 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-287
Affected Products (CPE)
Oracle Concurrent Processing
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.