Critical Flaw in Oracle Identity Manager Under Exploitation

A critical vulnerability, CVE-2025-61757, in Oracle's Identity Manager has been actively exploited, following a breach of Oracle Cloud earlier this year. This remote code execution (RCE) flaw, rated 9.8 on the CVSS scale, was discovered by AssetNote researchers and is linked to a previous vulnerability in Oracle Access Manager. The flaw allows attackers to bypass authentication through exposed REST management APIs, potentially compromising Oracle's cloud services.

The US Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its Known Exploited Vulnerabilities catalog, urging federal agencies to patch it by December 12. Oracle customers are advised to update their software immediately due to the ongoing exploitation.