Unauthenticated Data Compromise in Oracle Identity Manager Connector by Oracle

CVE-2026-34287

What is CVE-2026-34287?

An unauthenticated remote access vulnerability exists in the Oracle Identity Manager Connector component of Oracle Fusion Middleware. This flaw permits an unauthorized attacker with HTTPS access to compromise the Oracle Identity Manager Connector. If successfully exploited, this vulnerability may lead to unauthorized creation, deletion, or modification of data, allowing the attacker to gain extensive access to sensitive information within the system. It is essential for organizations using the affected version to apply necessary patches and security measures to protect their environments.

References