A vulnerability exists in the Oracle Identity Manager Connector component of Oracle Fusion Middleware, specifically affecting versions 12.2.1.4.0 and 14.1.2.1.0. This vulnerability allows a high privileged attacker with network access via HTTP to potentially take over the Oracle Identity Manager Connector. The CVSS 3.1 base score is 7.2, indicating a high severity with impacts on confidentiality, integrity, and availability. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.