Lucene search
+L

171 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•9 views

CVE-2026-73944: Improper Authentication

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

9.1CVSS5.7AI score0.00425EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•6 views

CVE-2026-73926: Improper Access Control

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

8.7CVSS5.7AI score0.00407EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•4 views

CVE-2026-71163: Improper Access Control

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

9.9CVSS5.7AI score0.00387EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•8 views

CVE-2026-83002: Improper Access Control

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.5CVSS5.7AI score0.00334EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•6 views

CVE-2026-73947: Improper Authentication

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

9.8CVSS5.8AI score0.00508EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•3 views

CVE-2026-73940: Improper Authentication

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Orac...

9.8CVSS5.8AI score0.00508EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•5 views

CVE-2026-71133: Improper Authentication

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

10CVSS5.8AI score0.00508EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•21 views

PT-2026-92485

Name of the Vulnerable Software and Affected Versions Oracle Access Manager version 12.2.1.4.0 Oracle Access Manager version 14.1.2.1.0 Description A flaw in the Authentication Engine component of Oracle Access Manager allows an unauthenticated attacker with network access via HTTP to compromise...

10CVSS5.8AI score0.00508EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•39 views

PT-2026-92495

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.0.0 Description An issue exists in the Authentication Engine component of Oracle Access Manager. An unauthenticated attacker with network access via HTTP can explo...

9.8CVSS5.7AI score0.00508EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•29 views

PT-2026-92493

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authentication Engine component allows a low privileged attacker with network access via HTTP to compromise the system. Successful...

9.9CVSS5.7AI score0.00432EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•9 views

CVE-2026-73941: Improper Access Control

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

8.6CVSS5.7AI score0.00414EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•26 views

PT-2026-92488

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authentication Engine component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via T3 and IIOP...

9.8CVSS5.7AI score0.00508EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/15 12:00 a.m.•25 views

PT-2026-92494

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authentication Engine component allows a high privileged attacker with network access via HTTP to compromise the system. Successful...

9.1CVSS5.7AI score0.00486EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•7 views

CVE-2026-73946: Improper Access Control

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

9.1CVSS5.7AI score0.00486EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/09/07 12:00 a.m.•11 views

The vulnerability of the Authentication Engine component of the Oracle Access Manager access control system allows a perpetrator to gain full control over the application.

The vulnerability of the Authentication Engine component in the Oracle Access Manager access control system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain full control over the application using the HTTP network protocol...

9CVSS6.1AI score0.00432EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2026/08/18 9:16 p.m.•15 views

CVE-2026-60726

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.8CVSS0.00432EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/18 8:59 p.m.•24 views

EUVD-2026-61408

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.8CVSS5.3AI score0.00432EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/18 12:00 a.m.•5 views

CVE-2026-60726: Improper Access Control

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

8.8CVSS5.7AI score0.00432EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/18 12:00 a.m.•22 views

PT-2026-77364

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 12.2.1.4.0 Oracle Access Manager versions 14.1.2.1.0 Description A flaw in the Authentication Engine component of Oracle Fusion Middleware allows a low privileged attacker with network access via HTTP to compromi...

8.8CVSS5.7AI score0.00432EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/22 12:32 a.m.•28 views

EUVD-2026-47278

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment...

8CVSS7.1AI score0.00356EPSS
SaveExploits0References2
Rows per page
Query Builder