Oracle Identity Manager — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• CISA Warns of Active Exploitation of Oracle WebLogic Vulnerability CVE-2024-21182

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of a two-year-old vulnerability in Oracle WebLogic Server, tracked as CVE-2024-21182. This flaw,…

  17 articles · Updated June 2, 2026
• Critical RCE Vulnerability in BeyondTrust Software Requires Immediate Patching

  BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…

  1046 articles · Updated February 9, 2026
• Clop Gang Breaches Dartmouth College's Oracle EBS, Exposes Sensitive Data

  Dartmouth College has confirmed a data breach involving the Clop extortion gang, which leaked data stolen from its Oracle E-Business Suite servers. The breach notification revealed that at least 1,494 Maine residents…

  4 articles · Updated November 25, 2025
• Dartmouth College Data Breach Linked to Clop's Oracle EBS Exploit

  Dartmouth College has confirmed a data breach resulting from an attack by the Clop extortion gang, which exploited a zero-day vulnerability in its Oracle E-Business Suite. The breach occurred between August 9 and August…

  17 articles · Updated December 2, 2025
• CISA Warns of Active Exploitation of Oracle Identity Manager Vulnerability CVE-2025-61757

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a critical vulnerability in Oracle Identity Manager, tracked as CVE-2025-61757, is being actively exploited in the wild. This flaw…

  31 articles · Updated November 26, 2025
• Oracle Identity Manager RCE Vulnerability Exploited in Active Attacks

  A critical vulnerability in Oracle Identity Manager, tracked as CVE-2025-61757, allows remote code execution (RCE) without authentication. Discovered by Searchlight Cyber researchers, the flaw has been actively…

  19 articles · Updated November 21, 2025
• Critical Oracle Identity Manager RCE Vulnerability Exploited

  A critical remote code execution vulnerability, tracked as CVE-2025-61757, has been identified in Oracle Identity Manager. This flaw allows unauthenticated attackers to execute code remotely and has been actively…

  4 articles · Updated November 21, 2025
• CVE-2025-61757: Oracle Identity Manager Auth Bypass Exploited in the Wild

  CVE-2025-61757, a vulnerability in Oracle Identity Manager, has been exploited as a zero-day in the wild. The Cl0p group is reportedly behind the exploitation, targeting Oracle EBS systems. Organizations using Oracle…

  2 articles · Updated November 24, 2025
• CISA Warns of Exploited RCE Vulnerability in Oracle Identity Manager

  The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability, tracked as CVE-2025-61757, affecting Oracle Identity Manager to its Known Exploited Vulnerabilities catalog. This…

  4 articles · Updated November 22, 2025
• Washington Post Data Breach Linked to Oracle E-Business Suite Exploit

  The Washington Post confirmed a data breach affecting nearly 10,000 employees and contractors due to a cyberattack linked to vulnerabilities in Oracle's E-Business Suite. The breach, attributed to the Clop ransomware…

  1 article · Updated November 22, 2025

Recent Intelligence Reports

• CISA flags two-year — Bleepingcomputer · June 2, 2026
• Oracle Issues Emergency Patch for Critical Flaw Enabling Remote Code Execution — Thecyberexpress · March 24, 2026
• Oracle Fixes High — Gbhackers · March 21, 2026
• Oracle Issues Urgent Security Update for Critical RCE Flaw in Identity Manager and Web Services Manager — Cybersecuritynews · March 21, 2026
• Patch Now: Oracle's Fusion Middleware Has Critical RCE Flaw — Darkreading · March 20, 2026
• Oracle pushes emergency fix for critical Identity Manager RCE flaw — Bleepingcomputer · March 20, 2026
• CVE-2026-21992 - Vulnerability in the Oracle Identity Manager produ — Cvefeed · March 20, 2026
• CVE-2026-21992: Critical Out-of — Tenable · March 20, 2026

Related Entities