← Back to browse · API

CVE-2025-61757

Severity
CRITICAL
CVSS
9.8
EPSS
0.88312
Risk score
95.11
CISA KEV
Yes
PoC
No
Published
2025-11-21
Modified
2025-11-21
First seen
2026-08-07
Aliases
EUVD-2025-35253, GHSA-V5GW-CQ42-M6W2
Products
Opentext:Identity Manager 12.2.1.4.0, Opentext:Identity Manager 14.1.2.1.0, Oracle:Fusion Middleware
Sources
euvd EUVD-2025-35253
cisa.gov CVE-2025-61757

Description

Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.

References