Threats tagged 'ghsa-v5gw-cq42-m6w2'

A critical vulnerability (CVE-2025-61757) exists in Oracle Fusion Middleware Identity Manager's REST WebServices component, affecting versions 12.2.1.4.0 and 14.1.2.1.0. This flaw allows unauthenticated attackers with network access via HTTP to fully compromise the Identity Manager, resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released patches for this vulnerability as part of its October 2025 Critical Patch Update and strongly recommends applying these updates promptly.