Threats tagged 'ghsa-frjm-w3mj-prpg'

A vulnerability exists in the Oracle Identity Manager product of Oracle Fusion Middleware, specifically in the OIM Legacy UI component. It affects versions 12.2.1.4.0 and 14.1.2.1.0. The flaw allows a high privileged attacker with network access via HTTP to compromise Oracle Identity Manager, potentially resulting in unauthorized access to critical data and unauthorized modification of some data. The vulnerability has a CVSS 3.1 base score of 7.6, indicating high severity with significant confidentiality and integrity impacts. Oracle has addressed this vulnerability in its September 2026 Critical Security Patch Update.