Vulnerability in Oracle Identity Manager by Oracle Fusion Middleware

CVE-2026-60560

What is CVE-2026-60560?

A vulnerability exists in Oracle Identity Manager within Oracle Fusion Middleware's REST WebServices component. This flaw allows an attacker with low privilege and network access to exploit the system using HTTP methods. Successful exploitation can lead to unauthorized actions, including the creation, deletion, or modification of critical data. Attackers may gain unauthorized access to sensitive information or control over all data accessible through Oracle Identity Manager. Organizations should prioritize patching and securing their installations to mitigate potential risks associated with this vulnerability.

References