Oracle exploit: IAM under attack

Thestack.Technology • November 23, 2025

Share: View original

... vulnerability that is being actively exploited. Per CVE.org: CVE-2025-61757 (CVSS 9.8) is an “easily exploitable vulnerability [that] allows ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Oracle IAM Vulnerability CVE-2025-61757 Exploited A critical vulnerability identified as CVE-2025-61757 has been discovered in Oracle Identity Manager, allowing for pre-authentication remote code execution. This vulnerability, rated with a CVSS score of 9.8, is currently being actively exploited, affecting users of Oracle's IAM solutions. 2 sources 21

Extracted Entities

Companies (1)

CVEs (1)

Domains (1)