Oracle Identity Manager vulnerabilities
47 known vulnerabilities affecting oracle/identity_manager.
Total CVEs
47
CISA KEV
1
actively exploited
Public exploits
4
Exploited in wild
4
Severity breakdown
CRITICAL19HIGH20MEDIUM8
Vulnerabilities
Page 2 of 3
CVE-2026-35267P3HIGHCVSS 8.8v12.2.1.4.0v14.1.2.1.02026-06-17
CVE-2026-35267 [HIGH] CWE-306 CVE-2026-35267: Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServic
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in
nvd
CVE-2026-71047P2HIGHCVSS 8.8v12.2.1.4.0v14.1.2.1.02026-09-15
CVE-2026-71047 [HIGH] CWE-284 CVE-2026-71047: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can result in
nvd
CVE-2026-73942P2HIGHCVSS 8.8v12.2.1.4.0v14.1.2.1.02026-09-15
CVE-2026-73942 [HIGH] CWE-284 CVE-2026-73942: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can
nvd
CVE-2026-70915P2HIGHCVSS 8.8v12.2.1.4.0v14.1.2.1.02026-09-15
CVE-2026-70915 [HIGH] CWE-284 CVE-2026-70915: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core).
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can resul
nvd
CVE-2026-61118P3HIGHCVSS 8.8v12.2.1.4.0v14.1.2.1.02026-08-18
CVE-2026-61118 [HIGH] CWE-284 CVE-2026-61118: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can
nvd
CVE-2026-60722P3HIGHCVSS 8.8v12.2.1.4.0v14.1.2.1.02026-08-18
CVE-2026-60722 [HIGH] CWE-306 CVE-2026-60722: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity Manager. Successful attacks of this vulnerability
nvd
CVE-2026-60716P3HIGHCVSS 8.8v12.2.1.4.0v14.1.2.1.02026-08-18
CVE-2026-60716 [HIGH] CWE-306 CVE-2026-60716: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity Manager. Successful attacks of this vulnerability
nvd
CVE-2026-60715P3HIGHCVSS 8.8v12.2.1.4.0v14.1.2.1.02026-08-18
CVE-2026-60715 [HIGH] CWE-284 CVE-2026-60715: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can
nvd
CVE-2017-3553P3CRITICALCVSS 9.9v11.1.2.3.02017-04-24
CVE-2017-3553 [CRITICAL] CVE-2017-3553: Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Ru
Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Rules Engine). The supported version that is affected is 11.1.2.3.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Identity Manager, att
nvd
CVE-2026-35265P3HIGHCVSS 8.8v12.2.1.4.0v14.1.2.1.02026-06-17
CVE-2026-35265 [HIGH] CWE-306 CVE-2026-35265: Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security). Su
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in takeover
nvd
CVE-2026-60330P3HIGHCVSS 8.5v12.2.1.4.0v14.1.2.1.02026-07-21
CVE-2026-60330 [HIGH] CWE-284 CVE-2026-60330: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Ident
nvd
CVE-2026-60323P3HIGHCVSS 8.1v12.2.1.4.0v14.1.2.1.02026-07-21
CVE-2026-60323 [HIGH] CWE-284 CVE-2026-60323: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can
nvd
CVE-2026-60560P3HIGHCVSS 8.1v12.2.1.4.0v14.1.2.1.02026-07-21
CVE-2026-60560 [HIGH] CWE-284 CVE-2026-60560: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST We
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability
nvd
CVE-2026-60707P3HIGHCVSS 8.7v12.2.1.4.0v14.1.2.1.02026-08-18
CVE-2026-60707 [HIGH] CWE-284 CVE-2026-60707: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Securit
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Identity Ma
nvd
CVE-2026-83422P3HIGHCVSS 8.1v12.2.1.4.0v14.1.2.1.02026-09-15
CVE-2026-83422 [HIGH] CWE-284 CVE-2026-83422: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks require human interactio
nvd
CVE-2026-35269P3HIGHCVSS 7.5v12.2.1.4.0v14.1.2.1.02026-06-17
CVE-2026-35269 [HIGH] CWE-284 CVE-2026-35269: Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServic
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in
nvd
CVE-2020-2728P3HIGHCVSS 7.5v12.2.1.3.02020-01-15
CVE-2020-2728 [HIGH] CVE-2020-2728: Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP use
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in unauthori
nvd
CVE-2026-73943P3HIGHCVSS 7.6v12.2.1.4.0v14.1.2.1.02026-09-15
CVE-2026-73943 [HIGH] CWE-284 CVE-2026-73943: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Leg
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Identi
nvd
CVE-2026-71111P3HIGHCVSS 7.8v12.2.1.4.0v14.1.2.1.02026-08-18
CVE-2026-71111 [HIGH] CWE-284 CVE-2026-71111: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Install
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Manager executes to compromise Oracle Identity Manager. Succe
nvd
CVE-2018-3179P3HIGHCVSS 7.2v11.1.2.3.0v12.2.1.3.02018-10-17
CVE-2018-3179 [HIGH] CVE-2018-3179: Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Ad
Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Identity
nvd