References https://dbugs.ptsecurity.com/vulnerability/PT-2020-1307 https://www.venustech.com.cn/new_type/aqtg/20260408/29289.html https://avd.aliyun.com/detail?id=AVD-2025-61757 https://www.secrss.com/articles/85246 https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-110/ https://www.oracle.com/security-alerts/alert-cve-2026-21992.html https://nvd.nist.gov/vuln/detail/CVE-2025-61757 https://slcyber.io/research-center/breaking-oracles-identity-manager-pre-auth-rce/ https://www.runzero.com/blog/oracle-identity-manager/ https://thehackernews.com/2025/11/cisa-warns-of-actively-exploited.html
Related Vulnerabilities旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞PoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code ExecutionPoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity SwitchPoCccm-detect: Clear-Com Core Configuration Manager Panel - Detect智慧物联网综合服务平台ListFileManager存在目录枚举漏洞PoCCVE-2026-35273: Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCEWP User Manager /profile/admin/about 文件包含漏洞(CVE-2026-9290)SteVe /steve/manager/signin 默认口令漏洞PoCCVE-2008-2052: Bitrix Site Manager 6.5 - Open RedirectPoCCVE-2026-9290: WP User Manager – User Profile Builder & Membership - Local File InclusionWP User Manager /profile/admin/about 本地文件包含漏洞