CVE-2026-60146

Name of the Vulnerable Software and Affected Versions Oracle Access Manager version 12.2.1.4.0 Oracle Access Manager version 14.1.2.1.0

Description An issue exists in the Authentication Engine component of Oracle Access Manager. An unauthenticated attacker with network access via HTTP can compromise the system, provided there is human interaction from a person other than the attacker. This may result in unauthorized read, update, insert, or delete access to a subset of accessible data and can significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.