CVE-2026-73962 Oracle CVE debrief

Who should care

Defenders and administrators of Oracle Access Manager instances should assess exposure and prioritize remediation. This includes IT security teams, system administrators, and anyone responsible for Oracle Fusion Middleware deployments.

Why it matters

CVE-2026-73962 is a critical vulnerability in Oracle Access Manager that allows low-privileged attackers to compromise the system and access critical data. Defenders should assess exposure, verify inventory, and prioritize remediation to prevent potential data breaches and system compromise.

• Potential unauthorized creation, deletion, or modification of critical data within Oracle Access Manager
• Potential unauthorized access to critical or all accessible data within Oracle Access Manager
• Possible scope changes impacting additional products
• Need for verification of inventory and remediation of affected versions

Technical summary

The vulnerability in Oracle Access Manager's Authentication Engine component allows low-privileged attackers with network access via HTTPS to compromise the system, potentially impacting additional products. This could lead to unauthorized data access or modification. The CVSS 3.1 Base Score is 9.6, indicating critical severity. Affected versions include 12.2.1.4.0 and 14.1.2.1.0 of Oracle Access Manager. Defenders should assess exposure and apply remediation to prevent potential data breaches and system compromise.

Defensive priority

High priority should be given to assessing exposure and applying remediation to Oracle Access Manager instances, particularly those with internet-facing HTTPS access. Defenders should verify inventory, assess potential scope changes, and implement compensating controls if necessary.

Recommended defensive actions

• Assess exposure of Oracle Access Manager instances, particularly those with internet-facing HTTPS access
• Verify inventory of Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0
• Apply remediation provided by Oracle
• Implement compensating controls to limit potential scope changes
• Monitor for suspicious activity related to Oracle Access Manager

Evidence notes

The CVE record and NVD detail page provide information on the vulnerability, its impacts, and affected versions. Oracle's advisory is referenced, offering guidance on remediation. The vulnerability affects Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0, and allows low-privileged attackers with network access via HTTPS to compromise the system. Evidence is limited to public sources, and defenders should verify inventory and assess exposure.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.