216.73.217.22

CVE-2025-61757

· Published 21/10/2025 20:20 · Modified 21/10/2025 20:20

Labels: CVE-2025-61757 2025-10-21CVE-2025-61757[email protected]

Essential information

Published
21/10/2025 20:20
Modified
21/10/2025 20:20
Author
—
Creator
—
CVSS
9.8 CRITICAL (v3.1)
CISA KEV
No
CWE
—
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS metrics

Description

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in takeover of Identity Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
oracle / fusion middleware identity manager cpe:2.3:a:oracle:fusion_middleware_identity_manager:12.2.1.4.0:*:*:*:*:*:*:*
oracle / fusion middleware identity manager cpe:2.3:a:oracle:fusion_middleware_identity_manager:14.1.2.1.0:*:*:*:*:*:*:*

References