Oracle Corporation Oracle Identity Manager vulnerability
Oracle CorporationOracle Identity Manager
- Not in CISA KEV
- Vendor fix available
Higher than 63% of scored CVEs
Description NVD
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager and Oracle Web Services Manager. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager and Oracle Web Services Manager. Note: Oracle Web Services Manager is installed with an Oracle Fusion Middleware Infrastructure. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Coverage 5 articles · 4 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Fri 20 Mar · 19:58 UTC | Dark Reading | Patch Now: Oracle's Fusion Middleware Has Critical RCE Flaw |
| Sat 21 Mar · 11:13 UTC | The Hacker News | Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager |
| Sun 22 Mar · 16:15 UTC | Security Affairs | Oracle fixes critical RCE flaw CVE-2026-21992 in Identity Manager |
| Mon 23 Mar · 05:59 UTC | SecurityWeek | Oracle Releases Emergency Patch for Critical Identity Manager Vulnerability |
| Wed 22 Apr · 09:16 UTC | SecurityWeek | Oracle Rolls Out 481 Patches, Many Remote Exploitable |
- Oracle Rolls Out 481 Patches, Many Remote ExploitableSecurityWeek
- Oracle Releases Emergency Patch for Critical Identity Manager VulnerabilitySecurityWeek
- Oracle fixes critical RCE flaw CVE-2026-21992 in Identity ManagerSecurity Affairs
- Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity ManagerThe Hacker News
- Patch Now: Oracle's Fusion Middleware Has Critical RCE FlawDark Reading · first in our coverage