5.3
Medium
CVE-2021-2457 Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Request Management & Workflow)
Description
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Request Management & Workflow). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Identity Manager accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Identity Manager | 11.1.2.3.0 | No fix stated |
Other CVEs of Identity Manager
The 15 CVEs of Identity Manager →
CVE-2026-46810
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: End User Self Service)
6.5
Medium
CVE-2026-46807
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI)
9.8
Critical
CVE-2026-35269
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices)
7.5
High
CVE-2026-35265
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security)
8.8
High