Login Request a demo
IM
Product
Identity Manager
by Oracle · last CVE Oct 20, 2026
On CISA KEVExploited in the wild
47
CVEs
1
On KEV
10.0
Max CVSS
1
New 30D
Vulnerabilities47In the news3Timeline
Severity mix
Critical 19High 20Medium 6Low 1
Severity
All severities47Critical19High20Medium6Low1
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Identity Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-61757
In wildKEV
9.8
89%
Oct 21
Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2017-10151
10.0
4%
Oct 30
Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Default Account)
Affected: 11.1.1.7; 11.1.1.9; 11.1.2.1.0; 11.1.2.2.0; 11.1.2.3; 12.2.1.3
CVE-2026-61066
9.9
0%
Aug 18
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60720
9.9
0%
Aug 18
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-35294
9.9
0%
Jun 16
Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Mainframe Connectors)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-35268
9.9
1%
Jun 16
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2017-3553
9.9
2%
Apr 24
Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Rules Engine)
Affected: 11.1.2.3.0
CVE-2026-83042
9.8
1%
Sep 15
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-70913
9.8
1%
Sep 15
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60727
9.8
1%
Aug 18
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60721
9.8
1%
Aug 18
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-61196
9.8
1%
Jul 21
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60329
9.8
1%
Jul 21
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-46807
9.8
1%
Jun 16
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-21992
9.8
1%
Mar 20
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Manager product of Oracle Fusion Middleware…
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2019-2729
9.8
89%
Jun 19
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services)
Affected: 11.1.2.3.0; 12.2.1.3.0
CVE-2017-15095
9.8
8%
Feb 6
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending…
Affected: 11.1.2.3.0; 12.2.1.3.0
CVE-2026-61197
9.1
0%
Jul 21
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60567
9.1
0%
Jul 21
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-73942
8.8
0%
Sep 15
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-71047
8.8
0%
Sep 15
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-70915
8.8
0%
Sep 15
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-61118
8.8
0%
Aug 18
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60722
8.8
0%
Aug 18
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60716
8.8
0%
Aug 18
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60715
8.8
0%
Aug 18
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-35267
8.8
0%
Jun 16
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-35265
8.8
0%
Jun 16
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60707
8.7
0%
Aug 18
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60330
8.5
0%
Jul 21
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-83422
8.1
0%
Sep 15
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60560
8.1
0%
Jul 21
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-60323
8.1
0%
Jul 21
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-71111
7.8
0%
Aug 18
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-73943
7.6
0%
Sep 15
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2021-2458
7.6
1%
Jul 21
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Identity Console)
Affected: 11.1.2.2.0; 11.1.2.3.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-35269
7.5
0%
Jun 16
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2020-2728
7.5
2%
Jan 15
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch)
Affected: 12.2.1.3.0
CVE-2018-3179
7.2
2%
Oct 17
Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console)
Affected: 11.1.2.3.0; 12.2.1.3.0
CVE-2026-46810
6.5
0%
Jun 16
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: End User Self Service)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2026-34283
6.1
0%
Apr 21
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Identity Console)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2020-2729
5.4
1%
Jan 15
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Advanced Console)
Affected: 11.1.2.3.0; 12.2.1.3.0
CVE-2021-2457
5.3
1%
Jul 21
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Request Management & Workflow)
Affected: 11.1.2.3.0
CVE-2026-101497
4.3
0%
Oct 20
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Connector Framework)
Affected: 12.2.1.4.0; 14.1.2.1.0
CVE-2019-2858
4.3
1%
Jul 23
Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console)
Affected: 11.1.2.3.0; 12.2.1.3.0
CVE-2016-5506
3.1
0%
Oct 25
Unspecified vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware allows local users to affect confidentiality and integrity via vectors related to…
Affected: All versions, or not specified
CVE-2014-2880
–
8%
Apr 17
Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to redirect…
Affected: 11.1.2.1.0
Showing 47