CVE-2026-60991 Oracle CVE debrief

Who should care

Administrators and users of Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 should apply patches or updates to mitigate the vulnerability. Additionally, security teams and vulnerability management teams should review the affected systems and ensure that they are properly configured and monitored. Operators of affected systems should prioritize patching and review system logs for suspicious activity. Platform owners and security personnel should verify that defensive measures are in place and functioning correctly. This vulnerability may impact system confidentiality, integrity, and availability, so a thorough review of system security is recommended.

Technical summary

The CVE-2026-60991 vulnerability affects Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It is an easily exploitable vulnerability that allows low-privileged attackers with logon access to compromise the system. Successful attacks can result in takeover. The CVSS 3.1 Base Score is 7.8, indicating high severity. This vulnerability is related to the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

Defensive priority

Oracle Identity Manager Connector vulnerability allows low-privileged attackers to compromise the system, leading to takeover.

Recommended defensive actions

• Apply vendor patches or updates
• Restrict access to the affected system
• Monitor system logs for suspicious activity
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE-2026-60991 vulnerability affects Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows low-privileged attackers with logon access to compromise the system. Successful attacks can result in takeover. The CVSS 3.1 Base Score is 7.8, indicating high severity. Evidence is limited to public sources and may not reflect the full scope of affected systems or potential impacts. Defenders should verify system configurations, review logs for suspicious activity, and ensure patches are applied according to vendor guidance.

Official resources