Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-61757
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in takeover of Identity Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Oracle Fusion Middleware 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Oracle Fusion Middleware（Oracle融合中间件）是美国甲骨文（Oracle）公司的一套面向企业和云环境的业务创新平台。该平台提供了中间件、软件集合等功能。Identity Manager是其中的一个企业身份管理系统组件。 Oracle Fusion Middleware的Identity Manager 12.2.1.4.0版本和14.1.2.1.0版本存在安全漏洞，该漏洞源于未经验证的攻击者可通过HTTP网络访问进行攻击，可能导致Identity Manager被接管。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
Oracle CorporationIdentity Manager 12.2.1.4.0 -
II. Public POCs for CVE-2025-61757
#POC DescriptionSource LinkShenlong Link
1Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in takeover of Identity Manager. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-61757.yamlPOC Details
2CVE-2025-61757https://github.com/B1ack4sh/Blackash-CVE-2025-61757POC Details
3Oracle Identity Manager 远程代码执行漏洞CVE-2025-61757https://github.com/Jinxia62/Oracle-Identity-Manager-CVE-2025-61757POC Details
4CVE-2025-61757https://github.com/Ashwesker/Blackash-CVE-2025-61757POC Details
5CVE-2025-61757https://github.com/Ashwesker/Ashwesker-CVE-2025-61757POC Details
6CVE-2025-61757https://github.com/ngominhquocngu/Blackash-CVE-2025-61757POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2025-61757
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same product: Identity Manager
Same vendor: Oracle Corporation
V. Comments for CVE-2025-61757

No comments yet

Leave a comment