Identity Manager

Vendor:

First CVE: Apr 17, 2014 · Active for 12 years

23
Total CVEs
More Total CVEs than 95% of tracked products
2.6
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 63% of tracked products
4.3%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Identity Manager over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 17, 2014
12 years ago
Most Recent CVE
Jun 16, 2026
39 days ago

CVE Severity & Scoring

Identity Manager23 CVEs
All CVEs352,427 CVEs
LowMediumHighCritical
Attack Vector
Local1 (4.3%)
Network21 (91.3%)
Unknown1 (4.3%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low22 (95.7%)
High0 (0.0%)
Unknown1 (4.3%)
User Interaction
None18 (78.3%)
Unknown1 (4.3%)
Required4 (17.4%)
Privileges Required
Low8 (34.8%)
High1 (4.3%)
None13 (56.5%)
Unknown1 (4.3%)

Top CVEs

Signals from CVEs in this product scope (23 CVEs).

23 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2025-61757CRITICAL
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil
Oct 21, 20259.898YESYES
CVE-2019-2729CRITICAL
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and
Jun 19, 20199.889NOYES
CVE-2019-11358MEDIUM
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source ob
Apr 20, 20196.178NOYES
CVE-2026-21992CRITICAL
Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Manager product of Oracle Fusion Middleware (
Mar 20, 20269.843NONO
CVE-2026-35268CRITICAL
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitabl
Jun 16, 20269.935NONO
CVE-2026-35294CRITICAL
Vulnerability in the Identity Manager Connector product of Oracle Fusion Middleware (component: Mainframe Connectors). Supported versions that are affected are 12.2.1.4.0 and 14.
Jun 16, 20269.934NONO
CVE-2026-46807CRITICAL
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily e
Jun 16, 20269.833NONO
CVE-2017-15095CRITICAL
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending th
Feb 6, 20189.832NONO
CVE-2026-35267HIGH
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil
Jun 16, 20268.831NONO
CVE-2026-35265HIGH
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploi
Jun 16, 20268.831NONO
View all 23 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (23 CVEs).

CISA KEV
1 CVE
4.3% of CVEs· 97th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
2 CVEs
8.7% of CVEs· 97th percentile
ExploitDB
3 CVEs
13.0% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (23 CVEs).

Media Mentions

Signals from CVEs in this product scope (23 CVEs).

Top CNAs Publishing CVEs For Identity Manager

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
14.1.2.1.099.010.3%11
14.1.2.0.016.10.2%00
12.2.1.4.0118.68.5%11
12.2.1.3.087.223.8%02
12.2.1.3110.04.0%00
11.1.2.3.087.413.1%01
11.1.2.3110.04.0%00
11.1.2.2.028.82.3%00
11.1.2.1.027.96.2%01
11.1.1.9110.04.0%00
11.1.1.7110.04.0%00