CISA Warns of Actively Exploited Critical Oracle Identity Manager Zero

Back Thehackernews

CISA Warns of Actively Exploited Critical Oracle Identity Manager Zero

Thehackernews •[email protected] (The Hacker News) • November 22, 2025

Share: View original

Your patch pipeline shouldn't be a gamble — build the guardrails that keep speed from becoming risk.

Learn how to protect cloud workloads, control access, and meet compliance requirements — without slowing innovation.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Warns of Exploited RCE Vulnerability in Oracle Identity Manager The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability, tracked as CVE-2025-61757, affecting Oracle Identity Manager to its Known Exploited Vulnerabilities catalog. This unauthenticated remote code execution flaw is currently being exploited in real-world attacks. 4 sources 45

Extracted Entities

Platforms (1)

Oracle Identity Manager