Access Manager (Oracle) - vulnerabilities (CVEs)

59 CVEs, 6 in the last 30 days, 6 known versions, newest CVE from 2026-10-20. Vendor: Oracle.

CVEs of Access Manager

CVE-2026-87337 - CVSS 10 (critical), 2026-10-20: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-87296 - CVSS 7.5 (high), 2026-10-20: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-87251 - CVSS 9.8 (critical), 2026-10-20: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-83426 - CVSS 8.7 (high), 2026-10-20: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-83409 - CVSS 8.1 (high), 2026-10-20: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-83407 - CVSS 8.6 (high), 2026-10-20: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-83369 - CVSS 3.1 (low), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Access SDK). Supported versions that are affected are 12.2.1.4.0…
CVE-2026-83001 - CVSS 9.1 (critical), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-83002 - CVSS 8.5 (high), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-73962 - CVSS 9.6 (critical), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-73958 - CVSS 8.1 (high), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-73950 - CVSS 9.8 (critical), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-73945 - CVSS 9.9 (critical), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-73947 - CVSS 9.8 (critical), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-73946 - CVSS 9.1 (critical), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-73944 - CVSS 9.1 (critical), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-73926 - CVSS 8.7 (high), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-73941 - CVSS 8.6 (high), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-73940 - CVSS 9.8 (critical), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-71163 - CVSS 9.9 (critical), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-71133 - CVSS 10 (critical), 2026-09-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-71124 - CVSS 4.3 (medium), 2026-08-18: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authorization Engine). Supported versions that are affected are…
CVE-2026-70905 - CVSS 9.8 (critical), 2026-08-18: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Agent infrastructure). Supported versions that are affected are…
CVE-2026-60726 - CVSS 8.8 (high), 2026-08-18: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-61067 - CVSS 8 (high), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-61065 - CVSS 9.8 (critical), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-60559 - CVSS 8.6 (high), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-60416 - CVSS 8.1 (high), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-60358 - CVSS 10 (critical), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-60355 - CVSS 9.8 (critical), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-60356 - CVSS 8.6 (high), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-60342 - CVSS 5.3 (medium), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-60333 - CVSS 9.9 (critical), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-60327 - CVSS 8.6 (high), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-60328 - CVSS 9.8 (critical), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-60326 - CVSS 9.1 (critical), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-60325 - CVSS 8 (high), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-60146 - CVSS 6.1 (medium), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-47037 - CVSS 8.8 (high), 2026-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The supported version that is affected is…
CVE-2026-46812 - CVSS 6.1 (medium), 2026-06-16: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-35314 - CVSS 7.3 (high), 2026-06-16: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Web Server Plugin). Supported versions that are affected are…
CVE-2026-35313 - CVSS 9.9 (critical), 2026-06-16: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2026-35261 - CVSS 6.5 (medium), 2026-06-16: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2023-21859 - CVSS 4.4 (medium), 2023-01-18: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The supported version that is affected is…
CVE-2022-39412 - CVSS 7.5 (high), 2022-10-18: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Admin Console). The supported version that is affected is…
CVE-2022-39405 - CVSS 5.3 (medium), 2022-10-18: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The supported version that is affected is…
CVE-2021-35587 - CVSS 9.8 (critical), 2022-01-19: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are…
CVE-2021-2358 - CVSS 4.9 (medium), 2021-07-21: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Rest interfaces for Access Mgr). The supported version that is…
CVE-2021-29425 - CVSS 6.5 (medium), 2021-04-13: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result…
CVE-2020-2745 - CVSS 4.3 (medium), 2020-04-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Federation). Supported versions that are affected are 11.1.2.3.0…
CVE-2020-2747 - CVSS 5.4 (medium), 2020-04-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: SSO Engine). Supported versions that are affected are 11.1.2.3.0…
CVE-2020-2740 - CVSS 4.6 (medium), 2020-04-15: Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are…
CVE-2020-2555 - CVSS 9.8 (critical), 2020-01-15: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are…
CVE-2019-10219 - CVSS 6.5 (medium), 2019-11-08: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious…
CVE-2018-2879 - CVSS 9 (critical), 2018-04-19: Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine). Supported versions that are affected…
CVE-2018-2587 - CVSS 6.5 (medium), 2018-04-19: Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are…
CVE-2018-2739 - CVSS 9.3 (critical), 2018-04-19: Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). Supported versions that are affected are…
CVE-2017-10262 - CVSS 5.9 (medium), 2018-01-18: Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is…
CVE-2017-10154 - CVSS 5.3 (medium), 2017-10-19: Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is…