Identity Manager Connector vulnerabilities

40 known vulnerabilities in Identity Manager Connector from Oracle. 40 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-91494Oct 20, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with ne

• 7.5 High severity

  Oracle Identity Manager Connector: Improper Authentication

  CVE-2026-91493Oct 20, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netw

• 8.7 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-91492Oct 20, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with networ

• 9.8 Critical severity

  Oracle Identity Manager Connector: Improper Authentication

  CVE-2026-91491Oct 20, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netw

• 9.1 Critical severity

  Oracle Identity Manager Connector: Improper Authentication

  CVE-2026-91490Oct 20, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netw

• 7.1 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-91489Oct 20, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon

• 7.1 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-91488Oct 20, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon

• 8.6 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-91212Oct 20, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netw

• 8.7 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-91211Oct 20, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged

• 7.5 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-83028Sep 15, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to

• 9.3 Critical severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-83027Sep 15, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to th

• 8.3 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-83026Sep 15, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to

• 8.7 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-83025Sep 15, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network ac

• 7.8 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-83024Sep 15, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the

• 8.6 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-83023Sep 15, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce

• 8.0 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-60998Aug 18, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows high privileged at

• 8.7 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-60996Aug 18, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged

• 9.9 Critical severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-60995Aug 18, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 7.2 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-60994Aug 18, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with logon to th

• 7.5 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-60993Aug 18, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to

• 8.1 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-60992Aug 18, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network ac

• 7.8 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-60991Aug 18, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the

• 9.9 Critical severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-60990Aug 18, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 8.6 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-60536Jul 21, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacke

• 9.8 Critical severity

  Oracle Identity Manager Connector: Missing Authentication for Critical Functionality

  CVE-2026-60535Jul 21, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacke

• 7.7 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-60534Jul 21, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows high privileged attac

• 8.0 High severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-60533Jul 21, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attack

• 9.8 Critical severity

  Oracle Identity Manager Connector: Improper Privilege Management

  CVE-2026-60532Jul 21, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacke

• 9.9 Critical severity

  Oracle Identity Manager Connector: Missing Authentication for Critical Functionality

  CVE-2026-60531Jul 21, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network acces

• 9.9 Critical severity

  Identity Manager Connector: Improper Privilege Management

  CVE-2026-46794Jun 17, 2026Oracle

  Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with ne

• 9.9 Critical severity

  Identity Manager Connector: Improper Access Control

  CVE-2026-46793Jun 17, 2026Oracle

  Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Database User). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network acc

• 9.9 Critical severity

  Identity Manager Connector: Improper Access Control

  CVE-2026-46792Jun 17, 2026Oracle

  Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with ne

• 9.9 Critical severity

  Identity Manager Connector: Improper Access Control

  CVE-2026-35294Jun 17, 2026Oracle

  Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Mainframe Connectors). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with netw

• 7.5 High severity

  Oracle Identity Manager Connector: Uncontrolled Resource Consumption

  CVE-2026-34290Apr 21, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to

• 9.1 Critical severity

  Oracle Identity Manager Connector: Improper Access Control

  CVE-2026-34287Apr 21, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS t

• 9.1 Critical severity

  Oracle Identity Manager Connector: Missing Authentication for Critical Functionality

  CVE-2026-34286Apr 21, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS t

• 9.1 Critical severity

  Oracle Identity Manager Connector: Missing Authentication for Critical Functionality

  CVE-2026-34285Apr 21, 2026Oracle

  Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS t

• 8.8 High severity

  Apache Log4j 1.x: Deserialization of Untrusted Data

  CVE-2022-23307Jan 18, 2022ApacheEPSS 54.4%

  CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.

• 9.8 Critical severity

  Apache Log4j 1.x: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-23305Jan 18, 2022ApacheEPSS 66.5%

  By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate

• 8.8 High severity

  Apache Log4j 1.x: Deserialization of Untrusted Data

  CVE-2022-23302Jan 18, 2022ApacheEPSS 63.8%

  JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a Topi