Digital.Nhs.Uk

CISA Warns of Active Exploitation of Oracle Identity Manager Vulnerability CVE-2025-61757

First seen 2 Dec 2025, 18:33 UTC • Digital.Nhs.Uk

+23 •50.7

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a critical vulnerability in Oracle Identity Manager, tracked as CVE-2025-61757, is being actively exploited in the wild. This flaw allows unauthenticated remote code execution and has a CVSS score of 9.8, indicating severe risk to affected systems. CISA has urged immediate patching by federal agencies and private sector operators.

How this analysis works

Continue Reading

Logitech Confirms Data Breach from Zero-Day Exploit by Clop Gang Washington Post Confirms Breach from Oracle EBS Attacks by Cl0p Ransomware Gang Cl0p Ransomware Group Claims Data Theft from Nearly 50 Companies EU Sanctions Russia Over Ongoing Cyber Espionage Campaign ShinyHunters Exploits Oracle PeopleSoft Zero-Day Vulnerability AI-Generated Exploits Target Siemens PLCs in Critical Infrastructure

CISA Warns of Active Exploitation of Oracle Identity Manager Vulnerability CVE-2025-61757

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading