Oracle Critical Patch Update — October 2025
Tuesday, 21 October 2025
Exploited 1
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
-
Critical 9.8
CVE-2025-61757 Exploited Public exploit Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 an…EPSS 89%
Critical 3
- Critical 9.8
- Critical 9.8
- Critical 9.8
Public exploit code 2
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 8.2
- Low 2.7
All vulnerabilities 76
Critical4 ShowHide
-
Critical 9.8
CVE-2025-61757 Exploited Public exploit Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 an…EPSS 89%
- Critical 9.8
- Critical 9.8
- Critical 9.8
High16 ShowHide
- High 8.6
- High 8.4
- High 8.2
- High 8.2
- High 8.2
- High 8.2
- High 8.2
- High 8.1
- High 8.1
- High 8.1
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.2
Medium50 ShowHide
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.3
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.0
- Medium 6.0
- Medium 5.9
- Medium 5.9
- Medium 5.8
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.3
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.3
- Medium 4.3
- Medium 4.3
- Medium 4.3
Low6 ShowHide
- Low 3.7
- Low 3.7
- Low 2.7
- Low 2.7
- Low 2.7
- Low 2.7