Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

57 records

Vendor: Oracle Component: Access Manager Clear all filters
TI-2026-77137 CVE-2026-87296 · GHSA-5rj7-274x-mrq3

Improper access control in Oracle Access Manager

Priority LOW 39

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00397 Published 2026-10-20 No fix listed CWE-284
TI-2026-57243 CVE-2026-83002 · GHSA-pq8g-pqh9-8899

Improper access control in Oracle Access Manager

Priority LOW 39

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00334 Published 2026-09-15 No fix listed CWE-284
TI-2026-57242 CVE-2026-83001 · GHSA-49qg-26q6-4vh9

Improper access control in Oracle Access Manager

Priority MEDIUM 42

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00486 Published 2026-09-15 No fix listed CWE-284
TI-2026-51974 CVE-2026-73962 · GHSA-gf36-p3h9-4h4j

Improper access control in Oracle Access Manager

Priority MEDIUM 43

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00362 Published 2026-09-15 No fix listed CWE-284
TI-2026-51970 CVE-2026-73958 · GHSA-p45v-w7qf-hx25

Improper access control in Oracle Access Manager

Priority LOW 37

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-09-15 No fix listed CWE-284
TI-2026-51962 CVE-2026-73950 · GHSA-96vr-v34g-rr34

Improper authentication in Oracle Access Manager

Priority MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287
TI-2026-51959 CVE-2026-73947 · GHSA-6w58-576w-wwgv

Improper authentication in Oracle Access Manager

Priority MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287
TI-2026-51958 CVE-2026-73946 · GHSA-jh6h-ghrg-789q

Improper access control in Oracle Access Manager

Priority MEDIUM 42

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00486 Published 2026-09-15 No fix listed CWE-284
TI-2026-51957 CVE-2026-73945 · GHSA-ccmq-pfp5-xc2v

Improper access control in Oracle Access Manager

Priority MEDIUM 43

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-09-15 No fix listed CWE-284
TI-2026-51956 CVE-2026-73944 · GHSA-q3j2-grqp-w6f4

Improper authentication in Oracle Access Manager

Priority MEDIUM 48

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-09-15 No fix listed CWE-287
TI-2026-51953 CVE-2026-73941 · GHSA-r79g-r8hv-489x

Improper access control in Oracle Access Manager

Priority MEDIUM 43

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00414 Published 2026-09-15 No fix listed CWE-284
TI-2026-51952 CVE-2026-73940 · GHSA-2q2m-g9vr-6rgh

Improper authentication in Oracle Access Manager

Priority MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287
TI-2026-51938 CVE-2026-73926 · GHSA-45gw-qqgv-rv69

Improper access control in Oracle Access Manager

Priority MEDIUM 40

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00407 Published 2026-09-15 No fix listed CWE-284
TI-2026-49854 CVE-2026-71163 · GHSA-xfr2-j99q-c42c

Improper access control in Oracle Access Manager

Priority MEDIUM 43

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00387 Published 2026-09-15 No fix listed CWE-284
TI-2026-49824 CVE-2026-71133 · GHSA-xjfx-m8p8-h9ph

Improper authentication in Oracle Access Manager

Priority MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-287
TI-2026-49815 CVE-2026-71124 · GHSA-p37j-9357-r87m

Improper access control in Oracle Access Manager

Priority LOW 20

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authorization Engine).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00331 Published 2026-08-18 No fix listed CWE-284
TI-2026-49598 CVE-2026-70905 · GHSA-hv69-9965-h4cf

Improper authentication in Oracle Access Manager

Priority MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructure).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-287
TI-2026-43389 CVE-2026-60726 · GHSA-4w4j-w66x-frgc

Improper access control in Oracle Access Manager

Priority MEDIUM 40

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284
TI-2026-43711 CVE-2026-61067 · GHSA-7gxc-4m65-hjfx

Improper authentication in Oracle Access Manager

Priority LOW 37

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00356 Published 2026-07-21 No fix listed CWE-287
TI-2026-43709 CVE-2026-61065 · GHSA-v25v-j57p-xvpv

Improper authentication in Oracle Access Manager

Priority MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-287
TI-2026-43224 CVE-2026-60559 · GHSA-3f65-rrqv-fx7g

Improper access control in Oracle Access Manager

Priority MEDIUM 45

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00414 Published 2026-07-21 No fix listed CWE-284
Load more