Vulnerabilities

TI-2026-77544 CVE-2026-91494 · GHSA-98hm-66v4-82wm

Improper access control in Oracle Identity Manager Connector

LOW 34

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00317 Published 2026-10-20 No fix listed CWE-284

TI-2026-77543 CVE-2026-91493 · GHSA-vwhh-cg82-9qr4

LOW 39

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00307 Published 2026-10-20 No fix listed CWE-287

TI-2026-77542 CVE-2026-91492 · GHSA-wj58-97h3-5f9r

LOW 39

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+).

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00261 Published 2026-10-20 No fix listed CWE-284

TI-2026-77541 CVE-2026-91491 · GHSA-c2vp-mgg4-vg5v

MEDIUM 49

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00354 Published 2026-10-20 No fix listed CWE-287

TI-2026-77540 CVE-2026-91490 · GHSA-w5j9-8hf8-rh6m

MEDIUM 47

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00396 Published 2026-10-20 No fix listed CWE-287

TI-2026-77539 CVE-2026-91489 · GHSA-pfr4-mcqj-5jh3

LOW 32

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00118 Published 2026-10-20 No fix listed CWE-284

TI-2026-77538 CVE-2026-91488 · GHSA-9mfj-5vrp-x7x9

LOW 32

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST).

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00148 Published 2026-10-20 No fix listed CWE-284

TI-2026-77272 CVE-2026-91212 · GHSA-7gwc-x8h4-7vm7

MEDIUM 43

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00307 Published 2026-10-20 No fix listed CWE-284

TI-2026-77271 CVE-2026-91211 · GHSA-hrp3-wh8h-h9jc

MEDIUM 40

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server).

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00379 Published 2026-10-20 No fix listed CWE-284