Oracle Identity Manager CVE-2025-61757 Vulnerability Detection Tool v2.2 🔥 Vulnerability Background Recently, Oracle Identity Manager was exposed to a severe remote code execution vulnerability (CVE-2025-61757). Due to improper handling of request URIs in the SecurityFilter, attackers can bypass authentication by adding the ;.wadl parameter, and then leverage Groovy scripts to execute arbitrary code during processor compilation, ultimately gaining server access.

Vulnerability Impact:

CVSS 3.1 Score: 9.8 (Critical)

Affected Scope: Thousands of servers worldwide

Exploit Difficulty: Low

Damage Level: Extremely High

🛡️ Tool Introduction To address this urgent security threat, we developed an automated scanning tool specifically designed to detect the CVE-2025-61757 vulnerability. This tool features efficiency, accuracy, and ease of use, helping enterprises quickly discover and remediate security risks.

Core Features

1. Intelligent Vulnerability Detection Authentication Bypass Detection: Precisely identifies the ;.wadl parameter bypass vulnerability

RCE Verification: Executes command injection verification via Groovy scripts

Target Identification: Automatically identifies Oracle Identity Manager systems

2. Efficient Batch Scanning Multi-threading Support: Supports up to 50 concurrent scans for fast bulk scanning

Intelligent Timeout: Configurable timeout to adapt to different network environments

Connection Reuse: Optimizes request efficiency to improve scanning speed

3. Professional Report Output Colored Terminal Output: Red, yellow, and blue colors distinguish vulnerability levels

Detailed Report Generation: Automatically saves vulnerability lists and scan reports

Real-time Progress Display: Provides intuitive progress and result statistics

4. Enterprise-grade Features Error Tolerance: Automatically handles network anomalies and timeouts

Result Deduplication: Automatically filters duplicate targets

Flexible Configuration: Supports custom thread count and timeout

🚀 Quick Start Environment Requirements Python 3.6+

requests library

Installation & Usage bash

Install dependencies

pip install requests

Download tool

git clone https://github.com/jinxia-security/oracle-scanner.git cd oracle-scanner

Single target scan

python oracle_scanner.py -u https://target.com:7001

Batch scan

python oracle_scanner.py -f targets.txt -t 20 -v

Generate detailed report

python oracle_scanner.py -f enterprise_targets.txt -T 15 Usage Examples Basic Scan bash python oracle_scanner.py -f targets.txt https://example.com/basic-scan.png

Verbose Mode bash python oracle_scanner.py -f targets.txt -v -t 15 Displays detailed detection process and debug information

Enterprise Scan bash python oracle_scanner.py -f enterprise_targets.txt -t 30 -T 10 Suitable for large enterprise network environments

📊 Output Description Color Indicators 🔴 Red: RCE vulnerability detected (Critical risk)

🟡 Yellow: Authentication bypass vulnerability detected (High risk)

🔵 Blue: Target detected but no vulnerability (Low risk)

🟢 Green: Normal information output

Report Example text 📋 Scan Report

📁 Total targets: 150 🔴 RCE vulnerabilities: 3 🟡 Authentication bypass: 12 🔵 Targets detected: 45 ⚫ Not found: 80 ❌ Errors/Timeouts: 10 ⏱️ Scan duration: 125.36 seconds