CVE-2026-83344: Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. in Oracle Corporation Oracle Identity Manager Connector
CVE-2026-83344 is a high-severity vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a high privileged attacker with network access via HTTP to compromise the Oracle Identity Manager Connector, potentially resulting in full takeover of the component. The vulnerability has a CVSS 3.1 base score of 7.2, indicating significant confidentiality, integrity, and availability impacts. Oracle has included fixes for this vulnerability in its September 2026 Critical Security Patch Update.
AI Analysis
Technical Summary
This vulnerability affects Oracle Identity Manager Connector in Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.2.1.0. It is easily exploitable by an attacker with high privileges and network access via HTTP. Successful exploitation can lead to complete compromise of the Oracle Identity Manager Connector. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle has released patches addressing this vulnerability as part of the September 2026 Critical Security Patch Update.
Potential Impact
An attacker with high privileges and network access via HTTP can exploit this vulnerability to take over the Oracle Identity Manager Connector component. This can lead to full compromise of the affected system's confidentiality, integrity, and availability. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Oracle has released security patches for this vulnerability in the September 2026 Critical Security Patch Update. Affected customers should apply the relevant patches promptly to mitigate the risk. Oracle strongly recommends remaining on actively supported versions and applying security patches without delay. Patch status is confirmed as available via the vendor advisory.
CVE-2026-83344: Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. in Oracle Corporation Oracle Identity Manager Connector
Description
CVE-2026-83344 is a high-severity vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a high privileged attacker with network access via HTTP to compromise the Oracle Identity Manager Connector, potentially resulting in full takeover of the component. The vulnerability has a CVSS 3.1 base score of 7.2, indicating significant confidentiality, integrity, and availability impacts. Oracle has included fixes for this vulnerability in its September 2026 Critical Security Patch Update.
CVSS v3.1
Score 7.2high
Affected software
Oracle Corporation
Oracle Identity Manager Connector
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects Oracle Identity Manager Connector in Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.2.1.0. It is easily exploitable by an attacker with high privileges and network access via HTTP. Successful exploitation can lead to complete compromise of the Oracle Identity Manager Connector. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. Oracle has released patches addressing this vulnerability as part of the September 2026 Critical Security Patch Update.
Potential Impact
An attacker with high privileges and network access via HTTP can exploit this vulnerability to take over the Oracle Identity Manager Connector component. This can lead to full compromise of the affected system's confidentiality, integrity, and availability. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Oracle has released security patches for this vulnerability in the September 2026 Critical Security Patch Update. Affected customers should apply the relevant patches promptly to mitigate the risk. Oracle strongly recommends remaining on actively supported versions and applying security patches without delay. Patch status is confirmed as available via the vendor advisory.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- oracle
- Date Reserved
- 2026-08-31T15:40:57.354Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://www.oracle.com/security-alerts/cspusep2026.html","vendor":"Oracle"}]
Threat ID: 6aa9a84355bf5e2cf5538191
Added to database: 09/15/2026, 20:19:15 UTC
Last enriched: 09/15/2026, 23:04:47 UTC
Last updated: 09/16/2026, 00:51:43 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.