Threats tagged 'ghsa-8c6g-mcjr-3hq4'

A vulnerability in Oracle Identity Manager Connector (part of Oracle Fusion Middleware) affects versions 12.2.1.4.0 and 14.1.2.1.0. The flaw allows an unauthenticated attacker with network access via TCP to potentially gain unauthorized creation, deletion, or modification access to critical data. The vulnerability has a high CVSS score of 8.7, indicating significant confidentiality and integrity impacts. Oracle has released patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.