CVE-2026-83042

Oracle Identity Manager (OIM Legacy UI component) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by a critical vulnerability (CVSS 3.1 9.8 ). An unauthenticated attacker with network access via HTTP can exploit the flaw to achieve full takeover of the OIM instance, wit...

EUVD-2026-79370

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: OIM Legacy UI. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identit...

CVE-2026-83027

Oracle Identity Manager Connector (component: Core) within Oracle Fusion Middleware is affected by a critical vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with access to the adjacent physical communication segment can exploit this with low complexity...

EUVD-2026-79356

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

CVE-2026-83028

Oracle Identity Manager Connector (Core component) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by a vulnerability allowing an unauthenticated attacker with access to the physical communication segment attached to the hardware to take over the product. The attack vec...

CVE-2026-83024

This vulnerability affects the Core component of Oracle Identity Manager Connector , part of Oracle Fusion Middleware. Supported versions 12.2.1.4.0 and 14.1.2.1.0 are impacted. A low-privileged local attacker with logon to the infrastructure where the connector executes can exploit this with low...

CVE-2026-83025

This vulnerability affects the Oracle Identity Manager Connector component (Core) of Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via TCP can exploit it, though exploitation is rated high complexity . The vulnerability...

CVE-2026-83026

Oracle Identity Manager Connector (Core component) of Oracle Fusion Middleware , versions 12.2.1.4.0 and 14.1.2.1.0 , is vulnerable to a difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment attached to the hardware where the connector execut...

EUVD-2026-79352

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity...

EUVD-2026-79354

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment...

EUVD-2026-79353

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

CVE-2026-83023

Oracle Identity Manager Connector (Oracle Fusion Middleware, component: Core) in supported versions 12.2.1.4.0 and 14.1.2.1.0 has a high-severity vulnerability (CVSS 3.1 base score 8.6 ) that allows an unauthenticated attacker with network access via HTTP to compromise the product. Due to a scope...

EUVD-2026-79351

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identi...

EUVD-2026-79343

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Cube Manager. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleToo...

CVE-2026-83015

A vulnerability in Oracle PeopleSoft Enterprise PeopleTools (component: Cube Manager ) affects supported versions 8.61–8.63 . The flaw allows a low-privileged, local attacker with logon access to compromise the application, resulting in full confidentiality, integrity, and availability impact (i....

EUVD-2026-79342

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Cube Manager. Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2026-83014

CVE-2026-83014 affects the Cube Manager component of Oracle PeopleSoft Enterprise PeopleTools , versions 8.61–8.63 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to cause unauthorized creation, deletion, or modification of data (high integrity impact) and ...

CVE-2026-83001

A vulnerability in the Authentication Engine component of Oracle Access Manager (part of Oracle Fusion Middleware) affects supported versions 12.2.1.4.0 and 14.1.2.1.0 . The flaw is reachable over HTTP by a high-privileged network attacker with low complexity and no user interaction. Successful e...

EUVD-2026-79330

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79329

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...