THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-61197 (CRITICAL 9.1) — Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comp

[NVD] CVE-2026-61197 (CRITICAL 9.1) — Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comp

mednvdPublished 2026-07-21

CVE-2026-61197 CVSS: 9.1 CRITICAL Published: 2026-07-21T22:18:51.620

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. Successful attack

Indicators of compromise

CVE-2026-61197cve
12.2.1.4ipv4
14.1.2.1ipv4

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-61197