Oracle Identity Manager Connector vulnerabilities

34 known vulnerabilities in Oracle Identity Manager Connector from Oracle. 34 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

34vulnerabilities

11critical

23high

0exploited

8.4average CVSS score

Latest first

7.4 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-91494Oct 20, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with ne
7.5 High severity
Oracle Identity Manager Connector: Improper Authentication
CVE-2026-91493Oct 20, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netw
8.7 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-91492Oct 20, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with networ
9.8 Critical severity
Oracle Identity Manager Connector: Improper Authentication
CVE-2026-91491Oct 20, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netw
9.1 Critical severity
Oracle Identity Manager Connector: Improper Authentication
CVE-2026-91490Oct 20, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netw
7.1 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-91489Oct 20, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon
7.1 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-91488Oct 20, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon
8.6 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-91212Oct 20, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netw
8.7 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-91211Oct 20, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged
7.2 High severity
Oracle Identity Manager Connector: Improper Privilege Management
CVE-2026-83344Sep 15, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Database Application Table). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged atta
7.5 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-83028Sep 15, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to
9.3 Critical severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-83027Sep 15, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to th
8.3 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-83026Sep 15, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to
8.7 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-83025Sep 15, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network ac
7.8 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-83024Sep 15, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the
8.6 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-83023Sep 15, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce
8.0 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-60998Aug 18, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows high privileged at
8.7 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-60996Aug 18, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged
9.9 Critical severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-60995Aug 18, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network acces
7.2 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-60994Aug 18, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with logon to th
7.5 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-60993Aug 18, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to
8.1 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-60992Aug 18, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network ac
7.8 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-60991Aug 18, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the
9.9 Critical severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-60990Aug 18, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network acces
8.6 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-60536Jul 21, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacke
9.8 Critical severity
Oracle Identity Manager Connector: Missing Authentication for Critical Functionality
CVE-2026-60535Jul 21, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacke
7.7 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-60534Jul 21, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows high privileged attac
8.0 High severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-60533Jul 21, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attack
9.8 Critical severity
Oracle Identity Manager Connector: Improper Privilege Management
CVE-2026-60532Jul 21, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacke
9.9 Critical severity
Oracle Identity Manager Connector: Missing Authentication for Critical Functionality
CVE-2026-60531Jul 21, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network acces
7.5 High severity
Oracle Identity Manager Connector: Uncontrolled Resource Consumption
CVE-2026-34290Apr 21, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to
9.1 Critical severity
Oracle Identity Manager Connector: Improper Access Control
CVE-2026-34287Apr 21, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS t
9.1 Critical severity
Oracle Identity Manager Connector: Missing Authentication for Critical Functionality
CVE-2026-34286Apr 21, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS t
9.1 Critical severity
Oracle Identity Manager Connector: Missing Authentication for Critical Functionality
CVE-2026-34285Apr 21, 2026Oracle
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS t