Unauthenticated Access Vulnerability in Oracle Identity Manager by Oracle

CVE-2026-34283

What is CVE-2026-34283?

A vulnerability in Oracle Identity Manager within Oracle Fusion Middleware allows unauthenticated attackers with network access via HTTP to potentially compromise the system. The vulnerability requires human interaction from a third party, which could lead to unauthorized modifications to accessible data. This could include unauthorized updates, inserts, or deletions, as well as unauthorized read access to certain data subsets within Oracle Identity Manager. The risk of such attacks could extend beyond Identity Manager due to the interconnected nature of the affected components.

References