CVE-2026-60330 Oracle CVE debrief

Who should care

Organizations using Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0 should prioritize patching this vulnerability to prevent potential exploitation. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP, potentially leading to a takeover of Oracle Identity Manager. The scope of the vulnerability is not limited to Oracle Identity Manager, as attacks may significantly impact additional products.

Technical summary

The vulnerability in Oracle Identity Manager's OIM Legacy UI component can be exploited by a low-privileged attacker with network access via HTTP. Successful exploitation can lead to a takeover of Oracle Identity Manager. The CVSS vector is CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H. The vulnerability affects Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is difficult to exploit and requires a high level of skill.

Defensive priority

High

Recommended defensive actions

• Apply the patch from Oracle as soon as possible
• Conduct a thorough inventory of Oracle Identity Manager instances to ensure all affected versions are identified and patched
• Implement compensating controls such as network segmentation and monitoring to reduce the attack surface
• Verify that no unauthorized access has occurred by reviewing system logs and performing a thorough security audit
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record was published on 2026-07-21T22:17:36.033Z and last modified on 2026-07-27T13:22:57.373Z. The NVD entry is currently Analyzed. This information is based on the NVD entry and the CVE record. The vulnerability affects Oracle Identity Manager versions 12.2.1.4.0 and 14.1.2.1.0. The CVSS score is 8.5, indicating a high-severity vulnerability. The vulnerability can be exploited by a low-privileged attacker with network access via HTTP, potentially leading to a takeover of Oracle Identity Manager. The scope of the vulnerability is not limited to Oracle Identity Manager, as attacks may significantly impact additional products.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.