CWE-CWE-306

Oracle Identity Manager Authentication Bypass (CVE-2025-61757)

Severity:
Critical
Summary

Oracle Identity Manager contains an authentication bypass vulnerability in its REST WebServices component. An attacker can gain unauthorized access to administrative endpoints. Successful exploitation allows complete takeover of the system, compromising all managed identities and access controls.

Impact

Unauthenticated attackers can compromise the system.

Remediation

Apply the latest Oracle Critical Patch Update for Identity Manager

Required Skills for Successful Exploitation
Actions To Take
Classifications
Vulnerability Index

You can search and find all vulnerabilities

Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Featured resources

Blog

Strengthening enterprise application security: Invicti acquires Kondukto

Blog

Modern AppSec KPIs: Moving from scan counts to real risk reduction

Blog

Friends don’t let friends shift left: Shift smarter with DAST-first AppSec

Blog

Vibe talking: Dan Murphy on the promises, pitfalls, and insecurities of vibe coding

Blog

Strengthening enterprise application security: Invicti acquires Kondukto

Blog

Modern AppSec KPIs: Moving from scan counts to real risk reduction

Blog

Friends don’t let friends shift left: Shift smarter with DAST-first AppSec

Blog

Vibe talking: Dan Murphy on the promises, pitfalls, and insecurities of vibe coding