Known vulnerabilities in Oracle Identity Manager Connector

Known vulnerabilities in Oracle Identity Manager Connector

Vendor: Oracle

Software: Oracle Identity Manager Connector

Software CPE: cpe:2.3:a:oracle:oracle_identity_manager_connector:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 17

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (17)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU126736 - Improper input validation CVE-2026-34285	CWE-20	High	No	No	-	22.04.2026	SB20260422147
#VU126737 - Improper input validation CVE-2026-34286	CWE-20	High	No	No	-	22.04.2026	SB20260422147
#VU126738 - Improper input validation CVE-2026-34287	CWE-20	High	No	No	-	22.04.2026	SB20260422147
#VU126741 - Improper input validation CVE-2026-34290	CWE-20	Medium	No	No	-	22.04.2026	SB20260422147
#VU126748 - Improper input validation CVE-2026-34288	CWE-20	Medium	No	No	-	22.04.2026	SB20260422147
#VU126749 - Improper input validation CVE-2026-34289	CWE-20	Medium	No	No	-	22.04.2026	SB20260422147
#VU126750 - Improper input validation CVE-2026-34294	CWE-20	Medium	No	No	-	22.04.2026	SB20260422147
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 180 more
#VU82276 - Allocation of Resources Without Limits or Throttling CVE-2023-5072	CWE-770	Medium	No	No	-	20.10.2023	SB2023102017 SB2023102018 SB2023113056 and 97 more
#VU77107 - Incorrect Default Permissions CVE-2023-2976	CWE-276	Low	No	No	-	08.06.2023	SB2023060849 SB2023071712 SB2023072512 and 157 more
#VU75409 - Improper input validation CVE-2023-20863	CWE-20	Medium	No	No	-	21.04.2023	SB2023042131 SB2023042132 SB2023050511 and 88 more
#VU70441 - Insufficient Verification of Data Authenticity CVE-2021-37533	CWE-345	Low	No	No	-	20.12.2022	SB2022122007 SB2022123001 SB2023011876 and 82 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	-	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305	CWE-89	Medium	No	No	-	18.01.2022	SB2022011818 SB2022012640 SB2022012641 and 94 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU48792 - Incorrect Default Permissions CVE-2020-17521	CWE-276	Low	No	No	-	06.12.2020	SB2020120601 SB2021012082 SB2021012083 and 31 more
#VU47105 - Deserialization of Untrusted Data CVE-2020-24750	CWE-502	High	Available	No	-	17.09.2020	SB2020092506 SB2020100512 SB2021012013 and 28 more