CVE-2026-35268

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Identity Manager version 12.2.1.4.0 Oracle Fusion Middleware Identity Manager version 14.1.2.1.0

Description An issue exists in the Core component of the Identity Manager product. A low privileged attacker with network access via T3 or IIOP (Internet Inter-ORB Protocol) can compromise the system. Successful exploitation may result in a complete takeover of Identity Manager and can significantly impact additional products due to a change in scope.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.