CERT24CVE-2026-91490: Critical Missing-Authentication Vulnerability in Oracle Identity Manager ConnectorLoading data…
CERT24Threat Observatory
Period

CVE-2026-91490: Critical Missing-Authentication Vulnerability in Oracle Identity Manager Connector

A vulnerability in the LDAP Gateway component of Oracle Identity Manager Connector allows an unauthenticated attacker with network access via LDAP to compromise the connector. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The CVSS 3.1 base score is 9.1.

← Back to intelligence

CVE-2026-91490: Critical Missing-Authentication Vulnerability in Oracle Identity Manager Connector

A vulnerability in the LDAP Gateway component of Oracle Identity Manager Connector allows an unauthenticated attacker with network access via LDAP to compromise the connector. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The CVSS 3.1 base score is 9.1.