Vulnerabilities

TI-2026-34419 CVE-2026-46810 · GHSA-666m-fvc4-7rvq

Improper access control in Oracle Identity Manager

LOW 35

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: End User Self Service).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00272 Published 2026-06-16 No fix listed CWE-284

TI-2026-34416 CVE-2026-46807 · GHSA-jmx4-f9gg-6jgx

MEDIUM 49

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00519 Published 2026-06-16 No fix listed CWE-306

TI-2026-27417 CVE-2026-35269 · GHSA-qrgr-5x45-v8x9

LOW 39

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00354 Published 2026-06-16 No fix listed CWE-284

TI-2026-27416 CVE-2026-35268 · GHSA-qf37-7q87-fq5f

MEDIUM 43

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00518 Published 2026-06-16 No fix listed CWE-284

TI-2026-27415 CVE-2026-35267 · GHSA-236f-3q2h-xcw5

MEDIUM 40

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00441 Published 2026-06-16 No fix listed CWE-306

TI-2026-27413 CVE-2026-35265 · GHSA-hqc7-vchh-vhvm

MEDIUM 40

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00441 Published 2026-06-16 No fix listed CWE-306