Oracle Web Services Manager vulnerabilities

6 known vulnerabilities in Oracle Web Services Manager from Oracle. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Oracle Web Services Manager: Missing Authentication for Critical Functionality

  CVE-2026-83334Sep 15, 2026Oracle

  Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with

• 8.2 High severity

  Oracle Web Services Manager: Improper Access Control

  CVE-2026-83265Sep 15, 2026Oracle

  Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Agent). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netw

• 8.1 High severity

  Oracle Web Services Manager: Missing Authentication for Critical Functionality

  CVE-2026-70924Aug 18, 2026Oracle

  Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with

• 9.6 Critical severity

  Oracle Web Services Manager: Improper Access Control

  CVE-2026-61001Aug 18, 2026Oracle

  Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with ne

• 9.1 Critical severity

  Oracle Web Services Manager: Improper Access Control

  CVE-2026-60737Aug 18, 2026Oracle

  Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with n

• 9.8 Critical severity

  Oracle Identity Manager: Missing Authentication for Critical Functionality

  CVE-2026-21992Mar 20, 2026OracleEPSS 1.05%

  Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2