Vulnerabilities

TI-2026-77549 CVE-2026-91501 · GHSA-8jh7-93jm-7pg7

Improper access control in Oracle Identity Manager installer

LOW 24

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer).

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00149 Published 2026-10-20 No fix listed CWE-284

TI-2026-77465 CVE-2026-91408 · GHSA-69gm-f3hc-443f

MEDIUM 49

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00381 Published 2026-10-20 No fix listed CWE-287

TI-2026-77464 CVE-2026-91407 · GHSA-wf4r-5hrr-9j64

LOW 38

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-10-20 No fix listed CWE-306

TI-2026-77318 CVE-2026-91259 · GHSA-686q-5fqp-gv5f

MEDIUM 40

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00403 Published 2026-10-20 No fix listed CWE-287

TI-2026-77113 CVE-2026-83403 · GHSA-w7f5-7hm6-6r6c

MEDIUM 40

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00403 Published 2026-10-20 No fix listed CWE-284

TI-2026-77112 CVE-2026-83402 · GHSA-cp23-w93q-7cgx

MEDIUM 40

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00414 Published 2026-10-20 No fix listed CWE-284

TI-2026-77111 CVE-2026-83401 · GHSA-4mxx-326v-h95r

LOW 27

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00231 Published 2026-10-20 No fix listed CWE-284

TI-2026-77811 CVE-2026-101497 · GHSA-xv4v-q3hv-h252

LOW 20

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Connector Framework).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0037 Published 2026-10-20 No fix listed CWE-400