CVE-2026-83344

Oracle Identity Manager Connector (Fusion Middleware), specifically the Database Application Tables component, contains an easily exploitable vulnerability in versions 12.2.1.4.0 and 14.1.2.1.0 that allows a high-privileged attacker with network access via HTTP to fully take over the connector. Exploitation requires valid high-privileged credentials — think a malicious or compromised administrator account rather than an anonymous outsider — but once those privileges are held, the attack is low-complexity, needs no user interaction, and compromises confidentiality, integrity, and availability (CVSS 3.1 base score 7.2). Because OIM connectors handle identity provisioning and reconciliation, a connector takeover could let the attacker manipulate identity data flowing between Oracle Identity Manager and connected database applications. Organizations running either affected version of the Database Application Tables connector are exposed, particularly those that allow HTTP access to connector endpoints from broader networks. No public proof-of-concept exists, the flaw is not on CISA's Known Exploited Vulnerabilities catalog, and no in-the-wild exploitation has been reported.

What to do: Apply the Oracle Critical Patch Update that remediated this flaw to the Database Application Tables connector on both 12.2.1.4.0 and 14.1.2.1.0 deployments. Restrict HTTP access to OIM and connector endpoints to trusted administration networks, and audit high-privileged accounts and recent connector configuration changes for signs of abuse. Review Oracle's Critical Patch Update advisory for the definitive patch numbers and any documented workarounds.