CISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw

Gbhackers •Divya • November 22, 2025

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new Oracle vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning that attackers are already exploiting it in real-world attacks. The bug, tracked as CVE-2025-61757, affects Oracle Identity Manager, part of Oracle Fusion Middleware. The flaw is rated as a “missing authentication for critical […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Warns of Exploited RCE Vulnerability in Oracle Identity Manager The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability, tracked as CVE-2025-61757, affecting Oracle Identity Manager to its Known Exploited Vulnerabilities catalog. This unauthenticated remote code execution flaw is currently being exploited in real-world attacks. 4 sources 45

Extracted Entities

CVEs (1)

CVE-2025-61757

Platforms (2)

Oracle Fusion Middleware Oracle Identity Manager