CVE-2026-91494 is a high-severity vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware. It affects versions 12.2.1.4.0 and 14.1.2.1.0. The flaw allows an unauthenticated attacker with network access via TCP to potentially create, delete, or modify critical data or gain unauthorized access to all data accessible by the Oracle Identity Manager Connector. The vulnerability is rated with a CVSS 3.1 base score of 7.4, indicating significant confidentiality and integrity impacts. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous security patches across multiple products. However, the specific patch availability for this vulnerability is not explicitly stated in the advisory content provided.
CVE-2026-91492 is a high-severity vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with network access via HTTP to potentially compromise the product. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all data accessible by the Oracle Identity Manager Connector. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 8.7, indicating high impact on confidentiality and integrity. Oracle has published a Critical Patch Update advisory addressing this and many other vulnerabilities, recommending timely patching. No known exploits in the wild have been reported.
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-91489 is a vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with logon access to the infrastructure where the connector runs to compromise it. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by the connector, impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 7.1, indicating high severity.
CVE-2026-91488 is a vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with logon access to the infrastructure where the connector runs to compromise it. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by the connector, resulting in high confidentiality and integrity impact. The vulnerability has a CVSS 3.1 base score of 7.1, indicating a high severity level. Oracle has published a Critical Patch Update advisory that includes patches for this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly.
CVE-2026-91212 is a high-severity vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all data accessible by the Oracle Identity Manager Connector. The vulnerability affects confidentiality but not integrity or availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory.
CVE-2026-91211 is a high-severity vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a high privileged attacker with network access via SOAP to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data. The vulnerability impacts confidentiality and integrity but does not affect availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability and strongly recommends applying patches promptly to mitigate exploitation risks.
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Database Application Table). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-83027 is a critical vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with access to the physical communication segment of the hardware running the connector to compromise it. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by the connector, impacting confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 9.3, indicating high severity and scope change affecting additional Oracle products. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities, strongly recommending patch application.
CVE-2026-60998 is a high-severity vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a high privileged attacker with network access via LDAP to compromise the Oracle Identity Manager Connector. Successful exploitation can lead to a complete takeover of the component and may impact additional Oracle products. The vulnerability has a CVSS 3.1 base score of 8.0, indicating high confidentiality, integrity, and availability impacts.
CVE-2026-60995 is a critical vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with network access via TLS to compromise the Oracle Identity Manager Connector, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 9.9. Attacks exploiting this flaw may also affect additional Oracle products due to scope change. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory.
CVE-2026-60992 is a high-severity vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with network access via TLS to potentially take over the Oracle Identity Manager Connector. The vulnerability is difficult to exploit but impacts confidentiality, integrity, and availability. Oracle has included fixes for this and many other vulnerabilities in their August 2026 Critical Security Patch Update.
CVE-2026-60991 is a high-severity vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with logon access to the infrastructure where the connector runs to compromise the Oracle Identity Manager Connector, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.8. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update advisory but does not explicitly state patch availability for this specific issue in the provided content.
CVE-2026-60990 is a critical vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with network access via TLS to compromise the Oracle Identity Manager Connector, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 9.9. Attacks exploiting this vulnerability may also affect additional Oracle products beyond the connector itself.
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager Connector. While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Identity Manager Connector accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Identity Manager Connector. While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Identity Manager Connector accessible data as well as unauthorized access to critical data or complete access to all Oracle Identity Manager Connector accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N).
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector. While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Identity Manager Connector accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Identity Manager Connector. CVSS 3.1 Base Score 8.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H).
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager Connector. While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).