Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

15 records

Advisory: Oracle Access Manager — oracle.com/security-alerts/cpujul2026.html Clear all filters
TI-2026-43711 CVE-2026-61067 · GHSA-7gxc-4m65-hjfx

Improper authentication in Oracle Access Manager

Priority LOW 37

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00356 Published 2026-07-21 No fix listed CWE-287
TI-2026-43709 CVE-2026-61065 · GHSA-v25v-j57p-xvpv

Improper authentication in Oracle Access Manager

Priority MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-287
TI-2026-43224 CVE-2026-60559 · GHSA-3f65-rrqv-fx7g

Improper access control in Oracle Access Manager

Priority MEDIUM 45

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00414 Published 2026-07-21 No fix listed CWE-284
TI-2026-43115 CVE-2026-60416 · GHSA-cgqf-x29v-rfw4

Improper authentication in Oracle Access Manager

Priority LOW 37

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-287
TI-2026-43058 CVE-2026-60358 · GHSA-55xr-q9c4-gj9c

Improper access control in Oracle Access Manager

Priority MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284
TI-2026-43056 CVE-2026-60356 · GHSA-95qg-63jr-rxmp

Missing authentication in Oracle Access Manager

Priority MEDIUM 45

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00414 Published 2026-07-21 No fix listed CWE-306
TI-2026-43055 CVE-2026-60355 · GHSA-h9x2-2g66-p8r3

Missing authentication in Oracle Access Manager

Priority MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-43042 CVE-2026-60342 · GHSA-5qcc-q2v2-fx32

Improper privilege management in Oracle Access Manager

Priority LOW 30

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00319 Published 2026-07-21 No fix listed CWE-269
TI-2026-43034 CVE-2026-60333 · GHSA-m8mw-5f48-qq89

Improper authentication in Oracle Access Manager

Priority MEDIUM 43

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-287
TI-2026-43029 CVE-2026-60328 · GHSA-qgg4-48vf-pgc7

Improper authentication in Oracle Access Manager

Priority MEDIUM 49

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-287
TI-2026-43028 CVE-2026-60327 · GHSA-c87v-4927-334g

Improper authentication in Oracle Access Manager

Priority LOW 39

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00414 Published 2026-07-21 No fix listed CWE-287
TI-2026-43027 CVE-2026-60326 · GHSA-7v8w-hh6v-r9r7

Improper authentication in Oracle Access Manager

Priority MEDIUM 48

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-07-21 No fix listed CWE-287
TI-2026-43026 CVE-2026-60325 · GHSA-xx6w-f85v-2x49

Improper access control in Oracle Access Manager

Priority LOW 37

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00356 Published 2026-07-21 No fix listed CWE-284
TI-2026-42849 CVE-2026-60146 · GHSA-x9fj-3qvq-p69r

Improper access control in Oracle Access Manager

Priority LOW 27

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00245 Published 2026-07-21 No fix listed CWE-284
TI-2026-34640 CVE-2026-47037 · GHSA-m534-2v87-qqgv

Improper authentication in Oracle Access Manager

Priority MEDIUM 40

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-287