U.S. CISA adds an Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities catalog

Securityaffairs.Co •Pierluigi Paganini • November 22, 2025

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a an Oracle Fusion Middleware flaw, tracked as CVE-2025-61757 (CVSS score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is a missing authentication for a critical function that […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Adds Multiple Vulnerabilities to Known Exploited Vulnerabilities Catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added several vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including flaws in XWiki Platform, Broadcom VMware Aria Operations, VMware Tools, and Oracle Fusion Middleware. These vulnerabilities are critical and have been actively exploited, prompting CISA to issue warnings to affected organizations. 2 sources 48

Extracted Entities

CVEs (1)

CVE-2025-61757

Platforms (1)

Oracle Fusion Middleware