Skip to content
fr Sign in
Not rated

CVE-2018-3179 Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console)

Description

Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. While the vulnerability is in Oracle Identity Manager, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Identity Manager accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Identity Manager. CVSS 3.0 Base Score 7.2 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L).

Affected products and versions

Product Affected versions Fixed in
Identity Manager 12.2.1.3.0 No fix stated
Identity Manager 11.1.2.3.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Identity Manager

The 15 CVEs of Identity Manager →
CVE-2026-46810 Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: End User Self Service) 6.5 Medium CVE-2026-46807 Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI) 9.8 Critical CVE-2026-35269 Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) 7.5 High CVE-2026-35265 Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security) 8.8 High
Track this CVE