[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOVwLbn7ppstUB_ijbki_LclfHWHJFrSdOrCrL7YlJRk":3,"g5a-family:oracle\u002Fidentity_manager":148,"g5a-ex:oracle\u002Fidentity_manager@*":151},{"success":4,"data":5},true,{"product":6,"versions":43,"topVulnerabilitiesByEpss":56,"kevVulnerabilities":120,"seoMetadata":126,"meta":145},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":42},"oracle","identity_manager",12,14,1,"2025-10-21",[14,18,20,22,24,27,29,31,34,36,38,40],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"11.1.1.7",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"11.1.1.7.0",{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},"11.1.1.9",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"11.1.1.9.0",{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},"11.1.2.1.0",2,{"version":28,"cve_count":26,"kev_count":16,"has_kev":17},"11.1.2.2.0",{"version":30,"cve_count":11,"kev_count":16,"has_kev":17},"11.1.2.3",{"version":32,"cve_count":33,"kev_count":16,"has_kev":17},"11.1.2.3.0",8,{"version":35,"cve_count":11,"kev_count":16,"has_kev":17},"12.2.1.3",{"version":37,"cve_count":33,"kev_count":16,"has_kev":17},"12.2.1.3.0",{"version":39,"cve_count":26,"kev_count":11,"has_kev":4},"12.2.1.4.0",{"version":41,"cve_count":11,"kev_count":11,"has_kev":4},"14.1.2.1.0","Identity Manager by Oracle is a technology product with 12 tracked versions and 14 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[44,45,46,47,48,49,50,51,52,53,54,55],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":11,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},{"version":28,"cve_count":26,"kev_count":16,"has_kev":17},{"version":30,"cve_count":11,"kev_count":16,"has_kev":17},{"version":32,"cve_count":33,"kev_count":16,"has_kev":17},{"version":35,"cve_count":11,"kev_count":16,"has_kev":17},{"version":37,"cve_count":33,"kev_count":16,"has_kev":17},{"version":39,"cve_count":26,"kev_count":11,"has_kev":4},{"version":41,"cve_count":11,"kev_count":11,"has_kev":4},[57,65,69,76,83,88,95,101,108,114],{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":17,"epssScore":64},"CVE-2019-2729","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2019-06-19",9.8,"v3.1","Critical",0.8883,{"cveId":66,"description":67,"publishedDate":12,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":4,"epssScore":68},"CVE-2025-61757","Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager.  Successful attacks of this vulnerability can result in takeover of Identity Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).",0.88647,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":62,"severity":74,"isKev":17,"epssScore":75},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,"Medium",0.8682,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":81,"severity":74,"isKev":17,"epssScore":82},"CVE-2014-2880","Open redirect vulnerability in the Oracle Identity Manager component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1, and 11.1.2.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the backUrl parameter in a changepwd action to identity\u002Ffaces\u002Ffirstlogin.","2014-04-17",5.8,"v2",0.08459,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":61,"cvssVersion":62,"severity":63,"isKev":17,"epssScore":87},"CVE-2017-15095","A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.","2018-02-06",0.08357,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":93,"severity":63,"isKev":17,"epssScore":94},"CVE-2017-10151","Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Default Account). Supported versions that are affected are 11.1.1.7, 11.1.2.3 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Identity Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2017-10-30",10,"v3.0",0.03915,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":93,"severity":63,"isKev":17,"epssScore":100},"CVE-2017-3553","Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Rules Engine). The supported version that is affected is 11.1.2.3.0. Easily \"exploitable\" vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Identity Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager. CVSS 3.0 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2017-04-24",9.9,0.02441,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"cvssVersion":62,"severity":106,"isKev":17,"epssScore":107},"CVE-2020-2728","Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Identity Manager accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).","2020-01-15",7.5,"High",0.02016,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":112,"cvssVersion":93,"severity":106,"isKev":17,"epssScore":113},"CVE-2018-3179","Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Identity Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Identity Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Identity Manager. CVSS 3.0 Base Score 7.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:L\u002FI:N\u002FA:L).","2018-10-17",7.2,0.01767,{"cveId":115,"description":116,"publishedDate":117,"cvssScore":118,"cvssVersion":62,"severity":74,"isKev":17,"epssScore":119},"CVE-2021-2457","Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Request Management & Workflow). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Identity Manager accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N).","2021-07-21",5.3,0.01214,[121],{"cveId":66,"description":67,"publishedDate":12,"cvssScore":61,"severity":63,"isKev":4,"epssScore":68,"cisaVulnName":122,"cisaDateAdded":123,"cisaShortDescription":124,"cisaRequiredAction":125},"Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability","2025-11-21","Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":127,"metaDescription":128,"keywords":129,"structuredData":130},"Identity Manager by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Identity Manager by Oracle covering 12 versions with 14 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Identity Manager vulnerabilities, Identity Manager security, Identity Manager CVE, Oracle Identity Manager, Identity Manager threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Identity Manager KEV, Identity Manager exploited vulnerabilities",{"@context":131,"@type":132,"name":133,"description":128,"url":134,"manufacturer":135,"applicationCategory":139,"softwareVersion":140,"mainEntity":141},"https:\u002F\u002Fschema.org","SoftwareApplication","Identity Manager","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fidentity_manager",{"@type":136,"name":137,"url":138},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","12 versions tracked",{"@type":142,"name":143,"description":144,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Identity Manager Security Vulnerabilities","Security vulnerabilities affecting Identity Manager by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":146,"apiVersion":147},"2026-10-18T18:50:27.888Z","3.0",[149],{"product":150,"cves":92},"identity_manager_connector",{"rows":152,"total":11,"capped":17,"failed":16},[153],{"cveId":66,"name":122,"severity":63,"cvss":61,"added":123,"epss":68,"published":154,"ranges":155,"checked":4,"hits":156,"covers":17},"2025-10-21T20:20:52.117",[39,41],[]]