CVE-2025-61757
Exploited in the Wild
✓ Confirmed 0-Day
Triaged: March 5, 2026
4 articles
EPSS Score
Source: FIRST.org · 2026-05-24
87.83%
probability
This CVE has a 87.83% probability
of being exploited in the next 30 days.
0%
Top 99.5th percentile of all CVEs
100%
CVSS score unavailable
Neither CIRCL nor NVD returned a CVSS score for this CVE.
View on VulnerabilityLookup ↗
Attack Intelligence
Exploits & PoC
Jinxia62/Oracle-Identity-Manager-CVE-2025-61757
Oracle Identity Manager 远程代码执行漏洞CVE-2025-61757
4
ngominhquocngu/Blackash-CVE-2025-61757
CVE-2025-61757
0
2 repos — triés par ⭐
Rechercher sur GitHub ↗
Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager
TheHackerNews
Mar 21, 2026
CVE-2026-21992: Critical Out-of-Band Oracle Identity Manager and Oracle Web Services Manager Remote Code Execution Vulnerability
Tenable-Research
Mar 20, 2026
CISA Warns of Actively Exploited Critical Oracle Identity Manager Zero-Day Vulnerability
TheHackerNews
Nov 22, 2025
Oracle Critical Patch Update, October 2025 Security Update Review
Qualys
Oct 23, 2025
Signal Intelligence
Confidence
92%
EPSS
87.83%
Mentions
4
Last Seen
Mar 21, 2026
CNA Information
Analyst Note
CVE-2025-61757 is explicitly named as a zero-day by CISA with active exploitation documented. The CVE was published 2025-10-21 and CISA added it to the KEV catalog citing active exploitation, establishing in-the-wild attacks. The critical CVSS 9.8 score and unauthenticated network attack vector support the severity. Timing confirms exploitation occurred concurrently with or before patch disclosure.
Threat Actors 4
APT 28
apt_group
Information theft and espionage
🇷🇺 RU
Hacking Team
apt_group
🇮🇹 IT
Red October
apt_group
🇷🇺 RU
Mana Team
apt_group
🇨🇳 CN
Triage Info
Decided atMar 05, 2026