CrowdStrike links Oracle EBS CVE-2025-61882 (CVSS 9.8) to Cl0p with moderate confidence; CISA adds to KEV, patch by Oct 27, ...
Scanning the *-bom.xml files in this repo directly with the CLI will give you a report in IQ. To work with the manual upload, the xml file(s) have to be in an archive (zip, tarball, etc) ...