CISA Urges Patch of Actively Exploited Flaw in Oracle Identity Manager
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-35587 | Unauthenticated RCE in Oracle Access Manager (OpenSSO Agent) | 9.8 | 96% | KEV | KEV |
| CVE-2025-61757 | Unauthenticated Takeover of Oracle Identity Manager via REST WebServices | 9.8 | 89% | KEV | KEV |
From the original article
1 min read at infosecurity-magazine.com
A critical security vulnerability in Oracle Identity Manager is being exploited in the wild, according to the US Cybersecurity and Infrastructure Security Agency (CISA). The flaw, tracked as CVE-2025-61757 , was revealed by Searchlight Cyber on November 20. It was reported by Oracle on November 21 and added to CISA Known Exploited Vulnerabilities (KEV) catalog the same day following reports of active exploitation.
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.