A vulnerability in Oracle Identity Manager Connector (part of Oracle Fusion Middleware) affects versions 12.2.1.4.0 and 14.1.2.1.0. The flaw allows an unauthenticated attacker with network access via TCP to potentially gain unauthorized creation, deletion, or modification access to critical data. The vulnerability has a high CVSS score of 8.7, indicating significant confidentiality and integrity impacts. Oracle has released patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.
CVE-2026-83028 is a high-severity vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running the connector to potentially take over the Oracle Identity Manager Connector. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high impact on confidentiality, integrity, and availability.
CVE-2026-83026 is a high-severity vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running the connector to compromise it. Successful exploitation can lead to full takeover of the Oracle Identity Manager Connector and may impact additional Oracle products. The vulnerability has a CVSS 3.1 base score of 8.3, indicating high confidentiality, integrity, and availability impacts. Oracle has included this fix in its September 2026 Critical Security Patch Update. No known exploits in the wild have been reported.
CVE-2026-83024 is a high-severity vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with logon access to the infrastructure where the connector runs to compromise the Oracle Identity Manager Connector, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS 3.1 base score of 7.8. Oracle has included fixes for this vulnerability in its September 2026 Critical Security Patch Update.
CVE-2026-46794 is a critical vulnerability in Oracle Fusion Middleware Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with network access via SSH to compromise the Identity Manager Connector, potentially leading to a full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS score of 9.9. Exploitation may also affect additional Oracle products due to scope change. Oracle has included this vulnerability in its June 2026 Critical Security Patch Update and strongly recommends applying the patches promptly. Workarounds include blocking required network protocols and removing unnecessary privileges, but these may affect application functionality.
CVE-2026-46793 is a critical vulnerability in Oracle Fusion Middleware Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with network access via HTTP to compromise the Identity Manager Connector, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability, with a CVSS 3.1 base score of 9.9. Attacks exploiting this flaw may also affect additional Oracle products due to scope change. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities, strongly recommending prompt patch application. Until patched, risk can be reduced by blocking required network protocols and limiting privileges. No explicit patch version is stated in the advisory, so users should consult Oracle's June 2026 Critical Security Patch Update documentation for exact patch details.
A critical vulnerability (CVE-2026-46792) exists in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with network access via HTTP to compromise the Identity Manager Connector, potentially leading to full takeover. The vulnerability impacts confidentiality, integrity, and availability with a CVSS score of 9.9. Oracle has released a Critical Security Patch Update addressing this and strongly recommends applying patches promptly. Mitigations include blocking required network protocols and restricting privileges until patches are applied.
Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Mainframe Connectors). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Identity Manager Connector. While the vulnerability is in Identity Manager Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Identity Manager Connector. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).