CVE-2026-83027

Analyzed Analyzed - Analysis Complete

Unauthenticated Data Access in Oracle Identity Manager Connector

Publication date: 2026-09-15

Last updated on: 2026-09-22

Assigner: Oracle

Description

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector. While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Identity Manager Connector accessible data as well as unauthorized access to critical data or complete access to all Oracle Identity Manager Connector accessible data. CVSS 3.1 Base Score 9.3 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-22

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83027

EUVD

EUVD-2026-79355

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	identity_manager_connector	12.2.1.4.0
oracle	identity_manager_connector	14.1.2.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with access to the physical network segment where the connector runs to compromise it. The flaw enables unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all accessible data.

Detection Guidance

Detection of CVE-2026-83027 requires checking for vulnerable versions of Oracle Identity Manager Connector (12.2.1.4.0 or 14.1.2.1.0). Inspect installed software versions and network segments where the connector executes. Monitor for unauthorized data access or modifications.

Impact Analysis

If exploited, this vulnerability could allow attackers to gain full access to sensitive data managed by Oracle Identity Manager Connector. This includes unauthorized modifications or deletions of critical data, leading to potential data breaches, loss of integrity, and unauthorized access to confidential information.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, and other regulations due to unauthorized data access, modification, or deletion. It may result in data breaches, loss of data integrity, and failure to meet legal requirements for data protection and security.

Mitigation Strategies

Apply Oracle's official security patches for Oracle Identity Manager Connector versions 12.2.1.4.0 and 14.1.2.1.0 immediately. Isolate the affected system from untrusted networks to limit physical access. Monitor network traffic for unusual activity targeting the Oracle Identity Manager Connector component.

Hi! I’m here to help you understand CVE-2026-83027. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70