U.S. CISA adds an Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities catalog

Securityaffairs • November 22, 2025

Share: View original

Oracle addressed the flaw with the release of Oracle Critical Patch Update Advisory – October 2025. ... Security Evangelist, Security Analyst and ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Adds Multiple Vulnerabilities to Known Exploited Vulnerabilities Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including flaws in XWiki Platform, Broadcom VMware Aria Operations, VMware Tools, and Oracle Fusion Middleware. These vulnerabilities are critical and have been actively exploited, prompting CISA to issue warnings to affected organizations. 2 sources 48

Extracted Entities

Companies (1)

Platforms (1)

Oracle Fusion Middleware