A vulnerability exists in the Oracle Identity Manager Connector component of Oracle Fusion Middleware affecting versions 12.2.1.4.0 and 14.1.2.1.0. This vulnerability allows a low privileged attacker with logon access to the infrastructure to compromise the Oracle Identity Manager Connector, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update.