Oracle Identity Manager Connector vulnerabilities

A vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware (subcomponent: Microsoft Active Directory) allows easy exploitation by an unauthenticated attacker with access to the infrastructure where Oracle Identity Manager Connector operates. Attacks can lead to unauthorized access to critical data and may cause system crashes.

Vulnerability in Oracle Identity Manager Connector (LDAP Gateway component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can take over Oracle Identity Manager Connector. CVSS 9.8.

Vulnerability in Oracle Identity Manager Connector (LDAP Gateway component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can create, delete, or modify critical data and gain unauthorized access to it. CVSS 9.1.

Vulnerability in Oracle Identity Manager Connector (Core component) of Oracle Fusion Middleware. Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with access to the physical communication segment attached to the hardware running Oracle Identity Manager Connector can gain unauthorized access to data, including creation, deletion, and modification.

Vulnerability in Oracle Identity Manager Connector (component: Core) affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable flaw allows low privileged attacker with network access via TLS to compromise Oracle Identity Manager Connector. Attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Identity Manager Connector (component: Core) affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable flaw allows low privileged attacker with network access via TLS to compromise Oracle Identity Manager Connector. Attacks may significantly impact additional products (scope change). CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle Identity Manager Connector (PeopleSoft Applications component) allows an unauthenticated attacker to remotely take over the system via HTTP. It requires only network access and no privileges or user interaction.

Vulnerability in Oracle Identity Manager Connector (PeopleSoft Applications component) allows an unauthenticated attacker to remotely take over the system via HTTP. It requires only network access and no privileges or user interaction.

Vulnerability in Oracle Identity Manager Connector (component: Core). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via HTTP can compromise the connector, potentially impacting other products.

Vulnerability in the LDAP Gateway component of Oracle Identity Manager Connector (Oracle Fusion Middleware). An unauthenticated attacker can exploit it over the network via TCP to gain unauthorized creation, deletion or modification access to critical data and full access to connector data; exploitation is difficult. CVSS 7.4.

Vulnerability in the LDAP Gateway component of Oracle Identity Manager Connector (Oracle Fusion Middleware). An unauthenticated attacker can exploit it over the network via LDAP to gain unauthorized access to critical connector data. CVSS 7.5.

Vulnerability in the SAP ERP+ component of Oracle Identity Manager Connector (Oracle Fusion Middleware). An unauthenticated attacker can exploit it over the network via HTTP to gain unauthorized creation, deletion or modification access to critical data and full access to connector data; exploitation is difficult and impact may extend beyond the connector (scope change). CVSS 8.7.

Vulnerability in the LDAP Gateway component of Oracle Identity Manager Connector (Oracle Fusion Middleware). A low privileged attacker with local logon to the infrastructure can gain unauthorized creation, deletion or modification access to critical data and full access to connector data. CVSS 7.1.

Vulnerability in the Generic REST component of Oracle Identity Manager Connector (Oracle Fusion Middleware). A low privileged attacker with local logon to the infrastructure can gain unauthorized creation, deletion or modification access to critical data and full access to connector data. CVSS 7.1.

Vulnerability in Oracle Identity Manager Connector (Generic REST component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable flaw allows an unauthenticated attacker with HTTP network access to gain unauthorized access to critical data.

Vulnerability in Oracle Identity Manager Connector (Connectors and Connector Server component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable flaw allows a high-privileged attacker with SOAP network access to unauthorized creation, deletion, or modification of critical data.

Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Database Application Table). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise Oracle Identity Manager Connector.

Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A difficult to exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment to take over Oracle Identity Manager Connector. CVSS 3.1 Base Score 7.5.

Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A difficult to exploit vulnerability allows an unauthenticated attacker with access to the physical communication segment to take over the connector, and the impact may extend to additional products (scope change). CVSS 3.1 Base Score 8.3.

Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via TCP to unauthorizedly create, delete or modify critical data and access all connector data, with impact potentially extending to additional products (scope change). CVSS 3.1 Base Score 8.7.

Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A low privileged attacker with logon access to the infrastructure where the connector executes can take over the connector. CVSS 3.1 Base Score 7.8.

Vulnerability in Oracle Identity Manager Connector (Core component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via HTTP can gain unauthorized access to critical data or all connector data, with impact potentially extending to additional products (scope change). CVSS 3.1 Base Score 8.6.

Vulnerability in Oracle Identity Manager Connector (component: Microsoft Active Directory) in versions 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit by a high-privileged attacker over LDAP, allowing takeover and potentially impacting other products (scope change). CVSS 8.0.

Vulnerability in Oracle Identity Manager Connector (component: Connectors and Connector Server) in versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable by a high-privileged attacker over HTTPS, allowing unauthorized creation, deletion, modification of data and access to critical data. May impact other products (scope change). CVSS 8.7.

Vulnerability in Oracle Identity Manager Connector (component: Core) in versions 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit by a low-privileged attacker, requires logon to infrastructure and user interaction. Allows unauthorized creation, deletion, modification of data and access to critical data. May impact other products (scope change). CVSS 7.2.

Vulnerability in Oracle Identity Manager Connector (component: Core) in versions 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit by an unauthenticated attacker with access to the physical communication segment, allowing takeover. CVSS 7.5.

Vulnerability in Oracle Identity Manager Connector (component: Core) in versions 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit by an unauthenticated attacker over TLS, allowing takeover. CVSS 8.1.

Vulnerability in Oracle Identity Manager Connector (component: Core) in versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable by a low-privileged attacker with logon to infrastructure, allowing takeover. CVSS 7.8.

Vulnerability in Oracle Identity Manager Connector (PeopleSoft component) allows an unauthenticated attacker to access critical data. The attack may impact other products.

Vulnerability in Oracle Identity Manager Connector (component: PeopleSoft Applications) versions 12.2.1.4.0 and 14.1.2.1.0. A high-privileged attacker with network access via HTTP can gain full access to critical data and modify it, also impacting other products.

Vulnerability in Oracle Identity Manager Connector (component: Generic Unix Connector) versions 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit, allows an unauthenticated attacker with physical network segment access to unauthorized create, delete, or modify critical data and cause a complete denial of service (DOS).

Vulnerability in Oracle Identity Manager Connector (component: Microsoft Active Directory) affecting version 12.2.1.4.0. A difficult to exploit vulnerability allows a low privileged attacker with network access via LDAP to compromise the product, resulting in unauthorized creation, deletion or modification of critical data and unauthorized read access to a subset of data.

Vulnerability in Oracle Identity Manager Connector (component: Core) affecting version 12.2.1.4.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTPS to gain unauthorized access to critical data or all accessible data.

Vulnerability in Oracle Identity Manager Connector (component: Core) affecting version 12.2.1.4.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or all accessible data.