CVE-2025-61757 Oracle Fusion Middleware
Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.
- CVSS
- not scored
On CISA’s exploited list
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
- Added
- 2025-11-21
- Federal patch deadline
- 2025-12-12
- Ransomware use
- not known