Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-60532: Oracle Fusion Middleware: Unauthenticated Takeover of PeopleSoft Connector
CVE-2026-60532
CVE-2026-60532
Summary
An attacker without permission can take control of the Oracle Identity Manager Connector in PeopleSoft Applications, which is part of Oracle Fusion Middleware. This is a serious issue because it could allow unauthorized access to sensitive information. Oracle Fusion Middleware users should update to a fixed version to prevent this takeover.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| oracle corporation | oracle identity manager connector | 12.2.1.4.0 |
Original title
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0...
Original description
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: PeopleSoft Applications). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager Connector. Successful attacks of this vulnerability can result in takeover of Oracle Identity Manager Connector. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
mitre CVSS3.1
9.8
- https://www.oracle.com/security-alerts/cpujul2026.html vendor-advisory
Published: 21 Jul 2026 · Updated: 25 Jul 2026 · First seen: 24 Jul 2026