Oracle Access Manager vulnerabilities

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Configuration Service.

Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Authentication Engine.

Vulnerability in Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, allows high privileged attacker via HTTP to take over the product, with impact on other products (scope change). CVSS 9.1.

Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via HTTPS can easily exploit it, potentially impacting additional products (scope change). It results in unauthorized access, creation, deletion, or modification of critical data. CVSS 3.1 Base Score: 9.6.

Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via HTTP can easily exploit it to take over Oracle Access Manager. CVSS 3.1 Base Score: 9.8.

Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.0.0. An unauthenticated attacker with network access via HTTP can easily exploit it to take over Oracle Access Manager. CVSS 3.1 Base Score: 9.8.

Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A high-privileged authenticated attacker with network access via HTTP can compromise Oracle Access Manager, and the attack may significantly impact additional products (scope change).

Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via HTTP can compromise Oracle Access Manager, and the attack may significantly impact additional products (scope change).

Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via HTTP can create, delete or modify critical data and gain complete access to Oracle Access Manager data.

Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via T3 or IIOP can compromise Oracle Access Manager.

Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via HTTP can modify or delete critical data, gain complete access to it and cause a partial denial of service (partial DoS).

Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via HTTP can compromise Oracle Access Manager, and the attack may significantly impact additional products (scope change).

Vulnerability in Oracle Access Manager (component: Agent infrastructure) allows an unauthenticated attacker with network access via SAML to compromise the system. The attack is easily exploitable and requires no user interaction.

In Oracle Access Manager (component: Authentication Engine), a vulnerability can be exploited by an unauthenticated attacker over the network via HTTP. Successful attack can lead to complete takeover of Oracle Access Manager.

Critical vulnerability in Oracle Access Manager (Authentication Engine component) allows an unauthenticated attacker to remotely take over the server via network using HTTP. The attack may impact additional products (scope change).

Critical vulnerability in Oracle Access Manager (Authentication Engine component) allows an unauthenticated attacker to remotely take over the server via network using HTTP. The attack does not impact other products (no scope change).

Vulnerability in Oracle Access Manager (Authentication Engine component) allows a low-privileged attacker to remotely take over the system via HTTP. The attack may impact additional products (scope change).

Vulnerability in Oracle Access Manager (Authentication Engine component) allows an unauthenticated attacker with network access via HTTP to take over the system.

Vulnerability in Oracle Access Manager (component: Authentication Engine) allows unauthenticated attacker via HTTP to gain unauthorized access to critical data and modify it. CVSS 9.1.

Vulnerability in Oracle Access Manager (component: Access SDK) affects versions 12.2.1.4.0 and 14.1.2.1.0. It is difficult to exploit but allows a low-privileged attacker with network access via HTTP to cause a partial denial of service (partial DoS) of the service.

Vulnerability in Oracle Access Manager (Authentication Engine component) affecting versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via HTTP can exploit it, though it is difficult. This can lead to takeover of Oracle Access Manager and impact additional products (scope change).

Vulnerability in Oracle Access Manager (Authentication Engine component). Difficult to exploit, but an unauthenticated attacker with network access via HTTP can compromise the system. High impact on confidentiality, integrity, and availability.

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager.

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable vulnerability allows a high privileged attacker with network access via HTTP to compromise Oracle Access Manager.

Vulnerability in Oracle Access Manager (Authorization Engine) affects versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can cause a partial denial of service via network (TCP).

Vulnerability in Oracle Access Manager (component: Authentication Engine) in versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker can remotely compromise the system via HTTP. Successful attacks can result in takeover of Oracle Access Manager.

Vulnerability in Oracle Access Manager (Authentication Engine component) allows a low-privileged attacker with access to the physical communication segment to compromise the system. Requires local network access.

In Oracle Access Manager versions 12.2.1.4.0 and 14.1.2.1.0, a vulnerability in the Authentication Engine component allows an unauthenticated attacker to remotely access critical data via HTTP. The vulnerability has a scope change affecting other products. CVSS 8.6 (confidentiality).

Vulnerability in Oracle Access Manager (component: Authentication Engine) versions 12.2.1.4.0 and 14.1.2.1.0. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to take over the system.

Vulnerability in Oracle Access Manager (Authentication Engine component) allows an unauthenticated attacker to access critical data. The attack may impact other products.

Vulnerability in Oracle Access Manager (Authentication Engine). An unauthenticated attacker via HTTP can read a subset of data.

Vulnerability in Oracle Access Manager (component: Authentication Engine) versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, requires user interaction, allows an unauthenticated attacker via HTTP to unauthorized read and modify data.

Vulnerability in Oracle Fusion Middleware's Oracle Access Manager product (component: Authentication Engine). Affected version is 14.1.2.1.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracle Access Manager.