VulnSocial

CVE-2026-34287Disclosure(oracle / identity_manager_connector)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Identity Manager Connector accessible data as well as unauthorized access to critical data or complete access to all Oracle Identity Manager Connector accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

oracle CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • identity_manager_connector

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-04-22); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
oracle
Products
identity_manager_connector

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-04-22: 1Mentions · 2026-04-26: 1Technical Details · 2026-04-22: 104-2204-26
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-04-221
Disclosure1
2026-04-261
General1
Full discourse2 posts
  • CVE@CVEnew
    General

    CVE-2026-34287 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. … https://www.cve.org/CVERecord?id=CVE-2026-34287

    Post summary

    The entry lists CVE‑2026‑34287 with product and version details but provides no further technical, exploit, or mitigation information.

    00010157
    57.3K followersView on X
  • 0day Signal@0dayPublishing
    Disclosure

    🚨 CVE-2026-34287: Oracle Corporation (CVSS: 9.1)... Unauthenticated HTTPS access to Oracle's identity backbone with full data manipulation rights - enterprise IAM just bec... https://zerodaysignal.com/vulnerability/CVE-2026-34287 #netsec #vulnerability #CVE #sysadmin #zeroday

    Post summary

    A tweet alerts to CVE-2026-34287, a high‑severity flaw in Oracle’s IAM system that permits unauthenticated HTTPS access and full data manipulation, with a link to a ZeroDaySignal article for details.

    00000107
    218 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apporacleidentity_manager_connector12.2.1.4.0--

Explore more

Back to dashboardoracle CVEsidentity_manager_connector vulnerabilities