Vulnerability in Oracle Identity Manager Affects Oracle Fusion Middleware

CVE-2026-83401

What is CVE-2026-83401?

An unauthenticated access vulnerability exists in Oracle Identity Manager within Oracle Fusion Middleware, specifically in the OIM Legacy UI component. This vulnerability allows an attacker with network access via HTTP to compromise the system. Exploitation necessitates human interaction from an individual other than the attacker, thereby increasing the attack's complexity. While the vulnerability resides in Oracle Identity Manager, its consequences could expand to affect other products as well. Successful exploitation could lead to unauthorized updates, inserts, deletions, and readings of sensitive data accessible through Oracle Identity Manager, thus posing serious security risks. For further information, refer to the Oracle Security Advisory.

References