Login Request a demo
AM
Product
Access Manager
by Oracle · last CVE Sep 15, 2026
On CISA KEVExploited in the wild
53
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities53In the news0Timeline
Severity mix
Critical 22High 14Medium 16Low 1
Severity
All severities53Critical22High14Medium16Low1
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Access Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-35587
In wildKEV
9.8
96%
Jan 19
Oracle Fusion Middleware Unspecified Vulnerability
Affected: 11.1.2.3.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2555
In wildKEV
9.8
97%
Jan 15
Oracle Multiple Products Remote Code Execution Vulnerability
Affected: 11.1.2.3.0
CVE-2026-71133
10.0
1%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60358
10.0
1%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-73945
9.9
0%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-71163
9.9
0%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60333
9.9
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-35313
9.9
0%
Jun 16
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-73950
9.8
1%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-73947
9.8
1%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-73940
9.8
1%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-70905
9.8
1%
Aug 18
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructure)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-61065
9.8
1%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60355
9.8
1%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60328
9.8
1%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-73962
9.6
0%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2018-2739
9.3
2%
Apr 19
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin)
Affected: 10.1.4.3.0; 11.1.2.3.0; 12.2.1.3.0
CVE-2026-83001
9.1
0%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-73946
9.1
0%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-73944
9.1
0%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60326
9.1
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2018-2879
9.0
21%
Apr 19
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine)
Affected: 11.1.2.3.0; 12.2.1.3.0
CVE-2026-60726
8.8
0%
Aug 18
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-47037
8.8
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 14.1.2.1.0
CVE-2026-73926
8.7
0%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-73941
8.6
0%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60559
8.6
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60356
8.6
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60327
8.6
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-83002
8.5
0%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-73958
8.1
0%
Sep 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60416
8.1
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-61067
8.0
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60325
8.0
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2022-39412
7.5
2%
Oct 18
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin Console)
Affected: 12.2.1.4.0
CVE-2026-35314
7.3
0%
Jun 16
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Web Server Plugin)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-35261
6.5
0%
Jun 16
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2018-2587
6.5
2%
Apr 19
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin)
Affected: 10.1.4.3.0; 11.1.2.3.0; 12.2.1.3.0
CVE-2026-60146
6.1
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-46812
6.1
0%
Jun 16
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2019-10219
6.1
2%
Nov 8
A vulnerability was found in Hibernate-Validator
Affected: 11.1.2.3.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2017-10262
5.9
2%
Jan 18
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin)
Affected: 11.1.2.3.0
CVE-2020-2747
5.4
1%
Apr 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: SSO Engine)
Affected: 11.1.2.3.0; 12.2.1.3.0
CVE-2026-60342
5.3
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2022-39405
5.3
1%
Oct 18
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.3.0
CVE-2017-10154
5.3
2%
Oct 19
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin)
Affected: 11.1.2.3.0
CVE-2021-2358
4.9
2%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Rest interfaces for Access Mgr)
Affected: 11.1.2.3.0
CVE-2021-29425
4.8
11%
Apr 13
Possible limited path traversal vulnerabily in Apache Commons IO
Affected: 11.1.2.3.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2740
4.6
1%
Apr 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 11.1.2.3.0; 12.2.1.3.0
CVE-2023-21859
4.4
0%
Jan 18
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0
Page 1 of 2 · 53 total
12