CVE-2026-46810

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Identity Manager versions 12.2.1.4.0 Oracle Fusion Middleware Identity Manager versions 14.1.2.1.0

Description An issue in the End User Self Service component allows an unauthenticated attacker with network access via IIOP (Internet Inter-ORB Protocol, a protocol used for communication between objects in different address spaces) to compromise the system. This can lead to unauthorized read, update, insert, or delete access to a subset of accessible data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.