Oracle Identity Manager vulnerabilities
47 known vulnerabilities affecting oracle/identity_manager.
Total CVEs
47
CISA KEV
1
actively exploited
Public exploits
4
Exploited in wild
4
Severity breakdown
CRITICAL19HIGH20MEDIUM8
Vulnerabilities
Page 3 of 3
CVE-2021-2458P3HIGHCVSS 7.6v11.1.2.2.0v11.1.2.3.0+2 more2021-07-21
CVE-2021-2458 [HIGH] CVE-2021-2458: Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Identity Conso
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Identity Console). Supported versions that are affected are 11.1.2.2.0, 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Identity Manager. Successful attacks require human interact
nvd
CVE-2026-46810P3MEDIUMCVSS 6.5v12.2.1.4.0v14.1.2.1.02026-06-17
CVE-2026-46810 [MEDIUM] CWE-284 CVE-2026-46810: Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: End User Self
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: End User Self Service). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Identity Manager. Successful attacks of this vulnerability can res
nvd
CVE-2026-34283P4MEDIUMCVSS 6.1v12.2.1.4.0v14.1.2.0.02026-04-21
CVE-2026-34283 [MEDIUM] CWE-284 CVE-2026-34283: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Identit
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Identity Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks require human inter
nvd
CVE-2021-2457P4MEDIUMCVSS 5.3v11.1.2.3.02021-07-21
CVE-2021-2457 [MEDIUM] CVE-2021-2457: Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Request Manage
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Request Management & Workflow). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in unauthor
nvd
CVE-2020-2729P4MEDIUMCVSS 5.4v11.1.2.3.0v12.2.1.3.02020-01-15
CVE-2020-2729 [MEDIUM] CVE-2020-2729: Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Advanced Conso
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in unauthor
nvd
CVE-2026-101497P4MEDIUMCVSS 4.3v12.2.1.4.0v14.1.2.1.02026-10-20
CVE-2026-101497 [MEDIUM] CVE-2026-101497: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Connect
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Connector Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability c
nvd
CVE-2019-2858P4MEDIUMCVSS 4.3v11.1.2.3.0v12.2.1.3.02019-07-23
CVE-2019-2858 [MEDIUM] CVE-2019-2858: Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Ad
Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attacks of this vulnerability can
nvd
← Previous3 / 3