CVE-2019-11358

CVE-2019-11358 is a prototype pollution vulnerability in jQuery (before 3.4.0) where mishandling of extend(true, {}, ...) can extend Object.prototype if an unsanitized source object has an enumerable proto property. The Core issue is triggered when a polluted prototype is introduced via nested ob...

CVE-2019-2729

CVE-2019-2729 affects Oracle WebLogic Server (Web Services component) with unauthenticated remote code execution via deserialization. Affected versions are 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability stems from improper deserialization (WebLogic Web Services / XMLDecoder context) an...

CVE-2017-15095

Summary of CVE-2017-15095 and related sightings : The material consistently reports a deserialization flaw in jackson-databind, affecting versions prior to 2.8.10 and 2.9.1. An unauthenticated user could trigger code execution via ObjectMapper.readValue with malicious input. The issue is describe...

CVE-2025-61757

CVE-2025-61757 affects Oracle Fusion Middleware Identity Manager REST WebServices in versions 12.2.1.4.0 and 14.1.2.1.0. The flaw stems from an authentication bypass in Identity Manager’s REST endpoints, allowing an unauthenticated attacker with network access over HTTP to take over the Identity ...

CVE-2020-2729

CVE-2020-2729 affects Oracle Identity Manager (Identity Manager Advanced Console) in Oracle Fusion Middleware. Affected versions are 11.1.2.3.0 and 12.2.1.3.0. An attacker with network access via HTTP and low privileges can compromise Identity Manager, leading to unauthorized update/insert/delete...

CVE-2021-2458

CVE-2021-2458 affects Oracle Fusion Middleware Identity Manager (Identity Console) with affected versions 11.1.2.2.0, 11.1.2.3.0, 12.2.1.3.0, and 12.2.1.4.0. The vulnerability allows a low-privileged, network-accessing attacker to compromise Identity Manager via HTTP, with user interaction requir...

CVE-2017-10151

CVE-2017-10151 affects Oracle Identity Manager (OIM) within Oracle Fusion Middleware. Affected OIM subcomponent: Default Account; versions 11.1.1.7, 11.1.2.3, and 12.2.1.3 are vulnerable. Root cause cited across sources is an authentication weakness/default account that can be exploited remotely ...

CVE-2021-2457

CVE-2021-2457 affects Oracle Identity Manager (part of Oracle Fusion Middleware), specifically the Identity Manager component: Request Management & Workflow. Affected version is 11.1.2.3.0. The vulnerability allows an unauthenticated, network-accessible attacker via HTTP to read restricted Identi...

CVE-2020-2728

Oracle Fusion Middleware Identity Manager (OIM) — LDAP user and role Synch component is affected in version 12.2.1.3.0. The CVE describes an unauthenticated, network-accessible vulnerability over HTTP that can lead to unauthorized access to Identity Manager data. The reported impact is High confi...

CVE-2018-3179

CVE-2018-3179 affects the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Affected versions are 11.1.2.3.0 and 12.2.1.3.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager, poten...

CVE-2014-2880

Oracle Fusion Middleware’s Oracle Identity Manager (OIM) component contains an Open Redirect vulnerability (CVE-2014-2880) affecting 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2. An attacker can abuse the backUrl parameter in a changepwd action to identity/faces/firstlogin to redirect users to arbi...

CVE-2019-2858

CVE-2019-2858 affects the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Affected versions are 11.1.2.3.0 and 12.2.1.3.0. The vulnerability allows a low-privileged, network-accessing attacker over HTTP to compromise Oracle Identity Manager, potenti...

CVE-2017-3553

CVE-2017-3553 affects Oracle Identity Manager within Oracle Fusion Middleware (Rules Engine). Affected product/version: Oracle Identity Manager, 11.1.2.3.0. Root cause/impact: network-accessible, low-privilege attacker can compromise Oracle Identity Manager, with full takeover risk and confidenti...

CVE-2016-5506

CVE-2016-5506 affects Oracle Fusion Middleware’s Oracle Identity Manager, specifically the App Server subcomponent. Multiple connected sources describe a local vulnerability that allows an attacker with local access to affect confidentiality and integrity, with CNVD indicating the attacker could ...

CVE-2026-21992

The CVE-2026-21992 vulnerability affects Oracle Fusion Middleware components: Oracle Identity Manager (REST WebServices) and Oracle Web Services Manager (Web Services Security). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. It is exploitable over HTTP without authentication and can lead to tak...

CVE-2026-35267

Technical details about CVE-2026-35267 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records.

CVE-2026-35269

Technical details about CVE-2026-35269 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records.

CVE-2026-35265

CVE-2026-35265 shows high-severity risk (CVSS 3.1 base 8.8) with network attack vector, low complexity, low privileges required, and no user interaction. Confidentiality, integrity, and availability are all impacted per the metrics; Oracle is listed as the source for the CVSS vector and an Oracle...

CVE-2026-35268

Technical details about CVE-2026-35268 are not publicly available in the provided documents. Monitor for updates; no affected products, vectors, or fixes are disclosed here.

CVE-2026-46807

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-46810

Technical details are not publicly available in the provided documents. Monitor for updates from the source. No affected products, vectors, or remediation are documented here.

CVE-2026-35294

Technical details (affected products/affected components/root cause/impact/remediation) are not publicly available in the provided documents. Monitor for updates from Oracle and CVE records.

CVE-2026-34283

CVE-2026-34283 affects Oracle Fusion Middleware’s Oracle Identity Manager (Identity Console) with vulnerable versions 12.2.1.4.0 and 14.1.2.0.0. The issue enables an unauthenticated attacker, over HTTP, to compromise Oracle Identity Manager; however, exploitation requires user interaction. The vu...

CVE-2026-60323

CVE-2026-60323 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable over HTTP by a low-privileged, network-accessible attacker, enabling unauthorized creation, deletion or modification of da...

CVE-2026-61196

Summary : CVE-2026-61196 affects Oracle Identity Manager (OIM) within Oracle Fusion Middleware, specifically the OIM Legacy UI. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The flaw allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, with the potential takeover of...

CVE-2026-60330

The CVE-2026-60330 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. The issue allows a low-privileged, unauthenticated-looking attacker with network access via HTTP to compromise OIM, potentially taking over the product...

CVE-2026-60329

CVE-2026-60329 affects Oracle Identity Manager (OIM Legacy UI) in Oracle Fusion Middleware. Affected products/version: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability permits an unauthenticated, network-accessible attacker via T3/IIOP to compromise OIM and can lead to takeover. The CVSS v3.1 base sc...

CVE-2026-60560

CVE-2026-60560 affects Oracle Fusion Middleware’s Oracle Identity Manager REST WebServices. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The issue is exploitable by a low-privileged attacker with network access via HTTP, enabling unauthorized creation, deletion, or modification of data, and u...

CVE-2026-60567

CVE-2026-60567 affects Oracle Fusion Middleware’s Oracle Identity Manager (OIM) Legacy UI component. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via HTTP to compromise OIM, potentially enabling creation, deletion, or modi...

CVE-2026-61197

CVE-2026-61197 affects the Oracle Identity Manager (OIM) Legacy UI in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The flaw allows an unauthenticated, network-based attacker (via HTTP) to compromise OIM, leading to unauthorized creation, deletion, or modification of dat...