CVE-2025-61757: Oracle Identity Manager Auth Bypass Flaw Added to CISA's KEV

Socradar • November 24, 2025

These observations suggest that CVE-2025-61757 was exploited as a zero - day in the wild. ... Cl0p's Oracle EBS Zero - Day Campaign: What We Know So Far.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Warns of Active Exploitation of Oracle Identity Manager Vulnerability CVE-2025-61757 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a critical vulnerability in Oracle Identity Manager, tracked as CVE-2025-61757, is being actively exploited in the wild. This flaw allows unauthenticated remote code execution and has a CVSS score of 9.8, indicating severe risk to affected systems. CISA has urged immediate patching by federal agencies and private sector operators. 31 sources 51

Extracted Entities

CVE-2025-61757: Oracle Identity Manager Auth Bypass Flaw Added to CISA's KEV

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Ransomware Groups (1)