This vulnerability affects Oracle Identity Manager Connector in Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.2.1.0. It requires an attacker to have physical access to the communication segment attached to the hardware where the connector executes. Exploitation could lead to complete compromise of the Oracle Identity Manager Connector. The CVSS vector indicates the attack vector is adjacent network (AV:A), with high attack complexity (AC:H), no privileges required (PR:N), no user interaction (UI:N), and high impact on confidentiality, integrity, and availability (C:H/I:H/A:H).

Successful exploitation can result in full takeover of the Oracle Identity Manager Connector, impacting confidentiality, integrity, and availability of the component. However, exploitation is difficult due to the requirement for physical access to the communication segment, limiting the attack surface.

Oracle has released a Critical Security Patch Update (CSPU) in August 2026 that addresses this vulnerability among others. Customers are strongly advised to apply the available security patches promptly to mitigate this vulnerability. No indication from the vendor advisory suggests that no action is required or that the issue is already mitigated without patching.