Dashboard / CVE-2025-61757

CVE-2025-61757

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.

CISA Known Exploited Vulnerability

Vendor / Product Oracle — Fusion Middleware
Date Added 2025-11-21
Remediation Due 2025-12-12
https://www.oracle.com/security-alerts/cpuoct2025.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-61757

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
oracle identity_manager 12.2.1.4.0
oracle identity_manager 14.1.2.1.0

References & Advisories (3)

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

88.65%
Raw Score 0.886470
Percentile 99.8%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links