Back Securityweek

CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability

Securityweek • November 24, 2025

Contacted by SecurityWeek, Oracle did not provide any clarifications and instead pointed to its October 2025 security bulletin, which does not mention ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Warns of Active Exploitation of Oracle Identity Manager Vulnerability CVE-2025-61757 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a critical vulnerability in Oracle Identity Manager, tracked as CVE-2025-61757, is being actively exploited in the wild. This flaw allows unauthenticated remote code execution and has a CVSS score of 9.8, indicating severe risk to affected systems. CISA has urged immediate patching by federal agencies and private sector operators. 31 sources 51

Extracted Entities

Vulnerabilities (1)

Oracle Identity Manager Vulnerability