CVE-2026-21992 - Vulnerability Analysis

Overview

Oracle Identity Manager 12.2.1.4.0 and 14.1.2.1.0 contain a remote code execution vulnerability in REST WebServices and Web Services Security components, letting unauthenticated network attackers fully compromise the system, exploit requires network access via HTTP.

Severity & Score

Impact

Unauthenticated attackers can fully compromise Oracle Identity Manager and Oracle Web Services Manager, leading to complete system takeover.

Mitigation

Update to the latest available version.

References

• https://www.oracle.com/security-alerts/alert-cve-2026-21992.html

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner