Veille CVE

Semaine du 17 novembre au 23 novembre 2025

3 CVE

  1. CVE-2025-61757 – Non évaluée Exploitée

    Oracle Fusion Middleware

    Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability — Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.

  2. CVE-2025-13223 – Non évaluée Exploitée

    Google Chromium V8

    Google Chromium V8 Type Confusion Vulnerability — Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption.

  3. CVE-2025-58034 – Non évaluée Exploitée

    Fortinet FortiWeb

    Fortinet FortiWeb OS Command Injection Vulnerability — Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.