Executive Summary

This vulnerability exists in the Identity Manager product of Oracle Fusion Middleware, specifically in versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with network access via T3 or IIOP protocols to exploit the system easily. The vulnerability can lead to a complete compromise of the Identity Manager, potentially affecting other connected products as well.

Useful 0 Not Useful 0

Impact Analysis

Successful exploitation of this vulnerability can result in a full takeover of the Identity Manager, impacting confidentiality, integrity, and availability of the system. This means sensitive information could be exposed or altered, and system operations could be disrupted, leading to significant security risks.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows a low privileged attacker with network access to compromise Oracle Identity Manager, potentially resulting in a complete takeover of the system. Given the high impact on confidentiality, integrity, and availability (CVSS score 9.9), successful exploitation could lead to unauthorized access to sensitive identity and access management data.

Such a compromise could negatively affect compliance with common standards and regulations like GDPR and HIPAA, which require strict controls over identity management, data confidentiality, and system integrity to protect personal and sensitive information.

Useful 0 Not Useful 0