Oracle EBS probes make October patch coverage urgent Defused reports exploratory exploits against EBS decoys. Oracle confirms an unauthenticated HTTP takeover flaw in versions 12.2.3–12.2.15; exposure counts do not establish real-world compromises.