CVE-2026-71047

CVE-2026-71047 is a high-severity (CVSS 8.8) vulnerability in the Core component of Oracle Identity Manager, part of Oracle Fusion Middleware, affecting versions 12.2.1.4.0 and 14.1.2.1.0. It is easily exploitable by an attacker who already holds low-privileged credentials and has network access to the OIM HTTP interface, requiring no user interaction. A successful attack allows complete takeover of Oracle Identity Manager with high impact to confidentiality, integrity, and availability — particularly damaging because OIM centrally manages identities and provisioning, so compromise can cascade into downstream applications and directories. Organizations running the affected on-premises OIM versions in enterprise Fusion Middleware deployments are at risk, especially where the OIM console or SOAP/REST endpoints are reachable by broad user populations. The flaw is not currently listed in CISA's KEV catalog and no public proof-of-concept is known, suggesting no observed in-the-wild exploitation at this time.

What to do: Apply the Oracle Critical Patch Update that remediated this CVE to both OIM 12.2.1.4.0 and 14.1.2.1.0 environments as soon as possible. Restrict network access to OIM HTTP endpoints so that only trusted users and networks can reach the console and service interfaces, and audit low-privileged OIM accounts for recent privilege changes or suspicious activity. Review identity provisioning logs and downstream connected systems for signs of unauthorized account creation or modification that would indicate post-compromise abuse.