Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
Oracle · Fusion Middleware
Date added (CISA)
2025-11-21
Remediation due
2025-12-12
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.