CISA Warns of Oracle’s Identity Manager RCE Vulnerability Actively Exploited in Attacks

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Warns of Active Exploitation of Oracle Identity Manager Vulnerability CVE-2025-61757 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a critical vulnerability in Oracle Identity Manager, tracked as CVE-2025-61757, is being actively exploited in the wild. This flaw allows unauthenticated remote code execution and has a CVSS score of 9.8, indicating severe risk to affected systems. CISA has urged immediate patching by federal agencies and private sector operators. 31 sources 51