415 matches found
CVE-2026-91501
A vulnerability exists in the Installer component of the Oracle Identity Manager product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with logon access to the underlying infrastructure can exploit this flaw to compromise Oracle ...
CVE-2026-91494
The Oracle Identity Manager Connector product within Oracle Fusion Middleware is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . Specifically, the LDAP Gateway component contains a vulnerability that allows an unauthenticated attacker with network access via TCP to compromise the system. This ...
CVE-2026-91491
A vulnerability exists in the LDAP Gateway component of the Oracle Identity Manager Connector product within Oracle Fusion Middleware . Affected supported versions include 12.2.1.4.0 and 14.1.2.1.0 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via ...
CVE-2026-91492
A vulnerability exists in the Oracle Identity Manager Connector product within Oracle Fusion Middleware (specifically the SAP ERP+ component). The issue affects supported versions 12.2.1.4.0 and 14.1.2.1.0 . It is a difficult to exploit vulnerability that allows an unauthenticated attacker with n...
CVE-2026-91493
The Oracle Identity Manager Connector product within Oracle Fusion Middleware is affected by a vulnerability in the LDAP Gateway component. Impacted versions include 12.2.1.4.0 and 14.1.2.1.0 . This easily exploitable vulnerability allows an unauthenticated attacker with network access via LDAP t...
CVE-2026-91490
The Oracle Identity Manager Connector product within Oracle Fusion Middleware is impacted by a critical vulnerability in the LDAP Gateway component, specifically affecting versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via LDAP can easily exploit this flaw to...
CVE-2026-91489
A vulnerability exists in the LDAP Gateway component of the Oracle Identity Manager Connector product within Oracle Fusion Middleware , affecting supported versions 12.2.1.4.0 and 14.1.2.1.0 . A low privileged attacker with access to the infrastructure where the software executes can exploit this...
CVE-2026-91488
The Oracle Identity Manager Connector product within Oracle Fusion Middleware (specifically the Generic REST component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with local access to the infrastructure can exploit this vulnerability to compromise the connecto...
CVE-2026-91407
A vulnerability exists in the REST WebServices component of the Oracle Identity Manager product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the Oracle Identity Man...
CVE-2026-91408
The Oracle Identity Manager product within Oracle Fusion Middleware (specifically the End User Self Service component) is affected by a critical vulnerability in versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via T3 or IIOP can easily exploit this flaw to com...
CVE-2026-91259
A vulnerability exists in the OIM Legacy UI component of the Oracle Identity Manager product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this vulnerability to compromise the Oracle...
CVE-2026-91212
The Oracle Identity Manager Connector product of Oracle Fusion Middleware is affected by a vulnerability in the Generic REST component. This issue impacts supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability ...
CVE-2026-91211
The Oracle Identity Manager Connector (part of Oracle Fusion Middleware) is vulnerable in versions 12.2.1.4.0 and 14.1.2.1.0 . A high-privileged attacker with network access via SOAP can exploit this vulnerability to compromise the connector. Successful exploitation allows for unauthorized creati...
CVE-2026-83402
A vulnerability exists in the OIM Legacy UI component of the Oracle Identity Manager product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTPS can easily exploit this flaw to compromise the Oracle Identi...
CVE-2026-83401
The Oracle Identity Manager product within Oracle Fusion Middleware is affected by a vulnerability in the OIM Legacy UI component, specifically in versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via HTTP can compromise the system, provided they can elicit nece...
CVE-2026-83403
A vulnerability exists in the Oracle Identity Manager product of Oracle Fusion Middleware , specifically within the OIM Legacy UI component. Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the ...
CVE-2026-101497
The Oracle Identity Manager product within Oracle Fusion Middleware is affected by a vulnerability in the Connector Framework component. Specifically, versions 12.2.1.4.0 and 14.1.2.1.0 are impacted. A low-privileged attacker with network access via HTTP can exploit this vulnerability to cause a ...
Oracle-Identity-Manager-CVE-2025-61757
Oracle Identity Manager CVE-2025-61757 Vulnerability Detection Tool v2.2 π₯ Vulnerability Background Recently, Oracle Identity Manager was exposed to a severe remote code execution vulnerability CVE-2025-61757. Due to improper handling of request URIs in the SecurityFilter, attackers can bypass...
Blackash-CVE-2025-61757
π¨ CVE-2025-61757 β Pre-Auth RCE Alert π¨ 𧩠Summary ID: CVE-2025-61757 Product: Oracle Identity Manager Oracle Fusion Middleware Component: REST WebServices Affected Versions: 12.2.1.4.0 & 14.1.2.1.0 Severity: π΄ Critical β 9.8 CVSS 3.1 Published: Oct 21, 2025 Type: Missing Authentication for Critic...
Oracle Identity Manager (September 2026 CSPU)
The version of Oracle Identity Manager installed on the remote host are affected by multiple vulnerabilities as referenced in the September 2026 CSPU advisory. - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected...