Login Request a demo
AM
Product
Access Manager
by Oracle · last CVE Sep 15, 2026
On CISA KEVExploited in the wild
53
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities53In the news0Timeline
Severity mix
Critical 22High 14Medium 16Low 1
Severity
All severities53Critical22High14Medium16Low1
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Access Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-35261
6.5
0%
Jun 16
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2018-2587
6.5
2%
Apr 19
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin)
Affected: 10.1.4.3.0; 11.1.2.3.0; 12.2.1.3.0
CVE-2026-60146
6.1
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-46812
6.1
0%
Jun 16
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2019-10219
6.1
2%
Nov 8
A vulnerability was found in Hibernate-Validator
Affected: 11.1.2.3.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2017-10262
5.9
2%
Jan 18
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin)
Affected: 11.1.2.3.0
CVE-2020-2747
5.4
1%
Apr 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: SSO Engine)
Affected: 11.1.2.3.0; 12.2.1.3.0
CVE-2026-60342
5.3
0%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2022-39405
5.3
1%
Oct 18
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.3.0
CVE-2017-10154
5.3
2%
Oct 19
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin)
Affected: 11.1.2.3.0
CVE-2021-2358
4.9
2%
Jul 21
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Rest interfaces for Access Mgr)
Affected: 11.1.2.3.0
CVE-2021-29425
4.8
11%
Apr 13
Possible limited path traversal vulnerabily in Apache Commons IO
Affected: 11.1.2.3.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2740
4.6
1%
Apr 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 11.1.2.3.0; 12.2.1.3.0
CVE-2023-21859
4.4
0%
Jan 18
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine)
Affected: 12.2.1.4.0
CVE-2026-71124
4.3
0%
Aug 18
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authorization Engine)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2020-2745
4.3
1%
Apr 15
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Federation)
Affected: 11.1.2.3.0; 12.2.1.3.0
Showing 16