CVE-2026-70915

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity...

CVE-2026-70913

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager...

CVE-2026-83422

A vulnerability in Oracle Identity Manager (component: OIM Legacy UI ) within Oracle Fusion Middleware affects supported versions 12.2.1.4.0 and 14.1.2.1.0 . The flaw allows an unauthenticated attacker with network access via HTTP to compromise the product, though successful exploitation requires...

EUVD-2026-79722

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...

EUVD-2026-79697

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Database Application Table. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2026-83344

Oracle Identity Manager Connector (Oracle Fusion Middleware, component: Database Application Table ) in versions 12.2.1.4.0 and 14.1.2.1.0 is vulnerable to a network-based attack via HTTP. A high-privileged attacker with low attack complexity can exploit this flaw to achieve full takeover of the ...

CVE-2026-83340

CVE-2026-83340 affects Oracle Identity Manager (component: Security ) within Oracle Fusion Middleware, versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve takeover of the Identity Manager instance, resulting in high...

EUVD-2026-79693

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity...

EUVD-2026-79370

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...

CVE-2026-83042

Oracle Identity Manager (OIM Legacy UI component) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by a critical vulnerability (CVSS 3.1 9.8 ). An unauthenticated attacker with network access via HTTP can exploit the flaw to achieve full takeover of the OIM instance, wit...

CVE-2026-83027

Oracle Identity Manager Connector (component: Core) within Oracle Fusion Middleware is affected by a critical vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with access to the adjacent physical communication segment can exploit this with low complexity...

EUVD-2026-79356

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

CVE-2026-83028

Oracle Identity Manager Connector (Core component) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by a vulnerability allowing an unauthenticated attacker with access to the physical communication segment attached to the hardware to take over the product. The attack vec...

CVE-2026-83024

This vulnerability affects the Core component of Oracle Identity Manager Connector , part of Oracle Fusion Middleware. Supported versions 12.2.1.4.0 and 14.1.2.1.0 are impacted. A low-privileged local attacker with logon to the infrastructure where the connector executes can exploit this with low...

EUVD-2026-79353

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-83025

This vulnerability affects the Oracle Identity Manager Connector component (Core) of Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via TCP can exploit it, though exploitation is rated high complexity . The vulnerability...

EUVD-2026-79354

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

EUVD-2026-79352

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity...

CVE-2026-83026

Oracle Identity Manager Connector (Core component) of Oracle Fusion Middleware , versions 12.2.1.4.0 and 14.1.2.1.0 , is vulnerable to a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment attached to the hardware where the connector execut...

CVE-2026-83023

Oracle Identity Manager Connector (Oracle Fusion Middleware, component: Core) in supported versions 12.2.1.4.0 and 14.1.2.1.0 has a high-severity vulnerability (CVSS 3.1 base score 8.6 ) that allows an unauthenticated attacker with network access via HTTP to compromise the product. Due to a scope...