CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-10-21
Oracle Identity Manager REST WebServices Authentication Bypass and System Takeover Vulnerability (CVE-2025-61757) Urgent Security Advisory
[Affected Scope] Oracle Fusion Middleware Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 (REST WebServices component)
[Impact] Unauthenticated remote attackers can bypass authentication via HTTP network access to achieve complete takeover of the Identity Manager system
[Mitigation] Immediately apply the official Oracle Critical Patch Update (CPU) and restrict external access to REST API endpoints