This vulnerability affects Oracle Identity Manager Connector, part of Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.2.1.0. It is easily exploitable by an attacker with low privileges who has network access via TLS. Successful exploitation can result in complete compromise of the Oracle Identity Manager Connector. The vulnerability has a CVSS 3.1 base score of 9.9, indicating critical impact on confidentiality, integrity, and availability. The scope of impact may extend to other Oracle products due to the connector's integration role. Oracle has published a Critical Security Patch Update advisory in August 2026 addressing this and many other vulnerabilities, strongly recommending patch application.

Successful exploitation can lead to full takeover of the Oracle Identity Manager Connector, compromising confidentiality, integrity, and availability of the affected system. The vulnerability's scope change means additional Oracle products integrated with the connector may also be impacted. This represents a critical risk to organizations using the affected versions.

Oracle has released a Critical Security Patch Update in August 2026 that addresses this vulnerability among others. Customers are strongly advised to apply the available patches promptly. Staying on actively supported versions and applying Oracle's security patches without delay is the recommended mitigation. No indication of temporary or alternative mitigations is provided; patching is the primary remediation.