CVE-2026-61066

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager versions 12.2.1.4.0 Oracle Identity Manager versions 14.1.2.1.0

Description A flaw in the OIM Legacy UI component of Oracle Fusion Middleware allows a low privileged attacker with network access via RMI (Remote Method Invocation, a mechanism that allows an object residing in one Java Virtual Machine to invoke methods on an object residing in another Java Virtual Machine) to compromise the system. Successful exploitation can lead to a full takeover of Oracle Identity Manager and may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.