Oracle Identity Manager REST WebServices - Authentication Bypass
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in takeover of Identity Manager. References: https://slcyber.io/research-center/breaking-oracles-identity-manager-pre-auth-rce/ https://nvd.nist.gov/vuln/detail/CVE-2025-61757 Remediation: Apply the latest security updates released by Oracle as referenced in the October 2025 Critical Patch Update.
Used 20 times · 10 assets checked · domain, subdomain, ipv4