A vulnerability exists in the Oracle Identity Manager Connector component of Oracle Fusion Middleware affecting versions 12.2.1.4.0 and 14.1.2.1.0. The flaw allows an unauthenticated attacker with access to the physical communication segment of the hardware running the connector to potentially take over the Oracle Identity Manager Connector. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this and many other vulnerabilities in their September 2026 Critical Security Patch Update.