{"id":"CVE-2026-91408","published":"2026-10-20T22:20:44.153","lastModified":"2026-10-21T18:44:55.490","description":"Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Identity Manager.  Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-287","CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows unauthenticated attackers to fully compromise Oracle Identity Manager through T3 or IIOP protocols, affecting versions 12.2.1.4.0 and 14.1.2.1.0. The flaw enables complete takeover of the system with high impact on confidentiality, integrity, and availability.","exploitability":"The vulnerability is easily exploitable with no authentication required, allowing attackers to compromise Oracle Identity Manager through network access using T3 or IIOP protocols.","blast_radius":"Successful exploitation could lead to full compromise of identity management infrastructure, potentially affecting thousands of users and their access rights across the organization.","remediation":"Immediate remediation is to upgrade to Oracle Fusion Middleware 12.2.1.4.0 or 14.1.2.1.0 with the latest patches for Oracle Identity Manager, as these versions contain fixes for this vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","identity","t3","iiop"],"model":"garnet-coder","analyzedAt":"2026-10-21T01:25:22.838Z"}}