A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2025-61757

Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

Published
2025-11-21
Modified
2026-07-31
Sources
cisa-kev

Summary

Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.