CVE-2019-11358

CVE-2019-11358 is a prototype pollution vulnerability in jQuery (before 3.4.0) where mishandling of extend(true, {}, ...) can extend Object.prototype if an unsanitized source object has an enumerable proto property. The Core issue is triggered when a polluted prototype is introduced via nested ob...

CVE-2019-2729

CVE-2019-2729 affects Oracle WebLogic Server (Web Services component) with unauthenticated remote code execution via deserialization. Affected versions are 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability stems from improper deserialization (WebLogic Web Services / XMLDecoder context) an...

CVE-2017-15095

Summary of CVE-2017-15095 and related sightings : The material consistently reports a deserialization flaw in jackson-databind, affecting versions prior to 2.8.10 and 2.9.1. An unauthenticated user could trigger code execution via ObjectMapper.readValue with malicious input. The issue is describe...

CVE-2025-61757

CVE-2025-61757 affects Oracle Fusion Middleware Identity Manager REST WebServices in versions 12.2.1.4.0 and 14.1.2.1.0. The flaw stems from an authentication bypass in Identity Manager’s REST endpoints, allowing an unauthenticated attacker with network access over HTTP to take over the Identity ...

CVE-2020-2729

CVE-2020-2729 affects Oracle Identity Manager (Identity Manager Advanced Console) in Oracle Fusion Middleware. Affected versions are 11.1.2.3.0 and 12.2.1.3.0. An attacker with network access via HTTP and low privileges can compromise Identity Manager, leading to unauthorized update/insert/delete...

CVE-2021-2458

CVE-2021-2458 affects Oracle Fusion Middleware Identity Manager (Identity Console) with affected versions 11.1.2.2.0, 11.1.2.3.0, 12.2.1.3.0, and 12.2.1.4.0. The vulnerability allows a low-privileged, network-accessing attacker to compromise Identity Manager via HTTP, with user interaction requir...

CVE-2017-10151

CVE-2017-10151 affects Oracle Identity Manager (OIM) within Oracle Fusion Middleware. Affected OIM subcomponent: Default Account; versions 11.1.1.7, 11.1.2.3, and 12.2.1.3 are vulnerable. Root cause cited across sources is an authentication weakness/default account that can be exploited remotely ...

CVE-2021-2457

CVE-2021-2457 affects Oracle Identity Manager (part of Oracle Fusion Middleware), specifically the Identity Manager component: Request Management & Workflow. Affected version is 11.1.2.3.0. The vulnerability allows an unauthenticated, network-accessible attacker via HTTP to read restricted Identi...

CVE-2026-61196

Summary : CVE-2026-61196 affects Oracle Identity Manager (OIM) within Oracle Fusion Middleware, specifically the OIM Legacy UI. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The flaw allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, with the potential takeover of...

CVE-2020-2728

Oracle Fusion Middleware Identity Manager (OIM) — LDAP user and role Synch component is affected in version 12.2.1.3.0. The CVE describes an unauthenticated, network-accessible vulnerability over HTTP that can lead to unauthorized access to Identity Manager data. The reported impact is High confi...

CVE-2018-3179

CVE-2018-3179 affects the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Affected versions are 11.1.2.3.0 and 12.2.1.3.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager, poten...

CVE-2014-2880

Oracle Fusion Middleware’s Oracle Identity Manager (OIM) component contains an Open Redirect vulnerability (CVE-2014-2880) affecting 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2. An attacker can abuse the backUrl parameter in a changepwd action to identity/faces/firstlogin to redirect users to arbi...

CVE-2019-2858

CVE-2019-2858 affects the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Affected versions are 11.1.2.3.0 and 12.2.1.3.0. The vulnerability allows a low-privileged, network-accessing attacker over HTTP to compromise Oracle Identity Manager, potenti...

CVE-2026-21992

The CVE-2026-21992 vulnerability affects Oracle Fusion Middleware components: Oracle Identity Manager (REST WebServices) and Oracle Web Services Manager (Web Services Security). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. It is exploitable over HTTP without authentication and can lead to tak...

CVE-2017-3553

CVE-2017-3553 affects Oracle Identity Manager within Oracle Fusion Middleware (Rules Engine). Affected product/version: Oracle Identity Manager, 11.1.2.3.0. Root cause/impact: network-accessible, low-privilege attacker can compromise Oracle Identity Manager, with full takeover risk and confidenti...

CVE-2026-60329

CVE-2026-60329 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware. Affected products/version: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability permits an unauthenticated, network-accessible attacker via T3/IIOP to compromise OIM and can lead to takeover. The CVSS v3.1 base sc...

CVE-2016-5506

CVE-2016-5506 affects Oracle Fusion Middleware’s Oracle Identity Manager, specifically the App Server subcomponent. Multiple connected sources describe a local vulnerability that allows an attacker with local access to affect confidentiality and integrity, with CNVD indicating the attacker could ...

CVE-2026-35267

Technical details about CVE-2026-35267 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records.

CVE-2026-60721

CVE-2026-60721 is a critical (CVSS 9.8) flaw in Oracle Identity Manager's OIM Legacy UI component, affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network HTTP access can fully compromise the application (confidentiality, integrity, availability all rated HIGH). No ...

CVE-2026-46807

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-35265

CVE-2026-35265 shows high-severity risk (CVSS 3.1 base 8.8) with network attack vector, low complexity, low privileges required, and no user interaction. Confidentiality, integrity, and availability are all impacted per the metrics; Oracle is listed as the source for the CVSS vector and an Oracle...

CVE-2026-35268

Technical details about CVE-2026-35268 are not publicly available in the provided documents. Monitor for updates; no affected products, vectors, or fixes are disclosed here.

CVE-2026-35269

Technical details about CVE-2026-35269 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records.

CVE-2026-35294

Technical details (affected products/affected components/root cause/impact/remediation) are not publicly available in the provided documents. Monitor for updates from Oracle and CVE records.

CVE-2026-60727

CVE-2026-60727 affects the OIM Legacy UI component of Oracle Identity Manager (versions 12.2.1.4.0 and 14.1.2.1.0). An unauthenticated attacker with network access via HTTP can fully compromise the application, scoring CVSS 9.8. No patch or remediation details are provided in the documents; custo...

CVE-2026-46810

Technical details are not publicly available in the provided documents. Monitor for updates from the source. No affected products, vectors, or remediation are documented here.

CVE-2026-60323

CVE-2026-60323 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker, enabling unauthorized creation, deletion or modification of da...

CVE-2026-34283

CVE-2026-34283 affects Oracle Fusion Middleware’s Oracle Identity Manager (Identity Console) with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. The issue enables an unauthenticated attacker, over HTTP, to compromise Oracle Identity Manager; however, exploitation requires user interaction. The vu...

CVE-2026-60330

The CVE-2026-60330 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The issue allows a low-privileged, unauthenticated-looking attacker with network access via HTTP to compromise OIM, potentially taking over the product...

CVE-2026-60567

CVE-2026-60567 affects Oracle Fusion Middleware’s Oracle Identity Manager (OIM) Legacy UI component. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, potentially enabling creation, deletion, or modi...

CVE-2026-60722

CVE-2026-60722 affects Oracle Identity Manager's OIM Legacy UI in versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can exploit T3/IIOP network access to fully compromise the application (CVSS 8.8, HIGH). No exploitation evidence or patch version is provided; monitor Oracle's August 2...

CVE-2026-60560

CVE-2026-60560 affects Oracle Fusion Middleware’s Oracle Identity Manager REST WebServices. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The issue is exploitable by a low-privileged attacker with network access via HTTP, enabling unauthorized creation, deletion, or modification of data, and u...

CVE-2026-60716

CVE-2026-60716 affects Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 via the OIM Legacy UI component. A low-privileged attacker with network access through T3 or IIOP protocols can compromise the application, achieving full confidentiality, integrity, and availability impact (CVSS 8....

CVE-2026-60720

A critical vulnerability (CVSS 9.9) in Oracle Identity Manager's OIM Legacy UI affects versions 12.2.1.4.0 and 14.1.2.1.0, allowing a low-privileged network attacker via HTTP to take over OIM and impact additional products. No root cause, exploit, or patch details are provided in the documents; O...

CVE-2026-61118

Affected: Oracle Identity Manager OIM Legacy UI in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged remote attacker can exploit this via HTTP to fully compromise the application (CVSS 8.8 HIGH, C/I/A impacts). No root cause or patch version is provided; apply Oracle's August...

CVE-2026-61197

CVE-2026-61197 affects the Oracle Identity Manager (OIM) Legacy UI in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The flaw allows an unauthenticated, network-based attacker (via HTTP) to compromise OIM, leading to unauthorized creation, deletion, or modification of dat...

CVE-2026-60715

CVE-2026-60715 affects Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 in the OIM Legacy UI component. A low-privileged attacker with network HTTP access can exploit it (CVSS 8.8, HIGH) to fully compromise the application. No in-the-wild exploitation or exploit code is reported. Oracle...

CVE-2026-71111

The Installer component of Oracle Identity Manager (versions 12.2.1.4.0 and 14.1.2.1.0) is vulnerable to a local privilege escalation (CVSS 7.8, HIGH) allowing a low-privileged attacker with host access to take over the product. No exploitation details are provided; apply the Oracle August 2026 C...

CVE-2026-61066

Oracle Identity Manager (component: OIM Legacy UI) in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 has a critical (CVSS 9.9) flaw exploitable over RMI by a low-privileged network attacker, leading to full product takeover with scope change affecting additional products. Oracle's August 20...

CVE-2026-60707

A CVSS 8.7 HIGH vulnerability in Oracle Identity Manager's Security component (versions 12.2.1.4.0 and 14.1.2.1.0) allows a high-privileged network attacker to compromise the product via HTTP, enabling unauthorized read, creation, deletion, and modification of critical data, with potential cross-...