Product by Oracle

    Oracle Access Manager

    53 known vulnerabilities in Oracle Access Manager (Oracle), 2 of them actively exploited (CISA KEV).

    Key figures

    53

    Vulnerabilities

    2

    Actively exploited (KEV)

    0

    Used by ransomware

    22

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Access Manager (Oracle)
    CriticalCVE-2021-35587

    Oracle Fusion Middleware Unspecified Vulnerability

    In CISA KEValso in 1 other product

    		9.8
    CriticalCVE-2020-2555

    Oracle Multiple Products Remote Code Execution Vulnerability

    In CISA KEValso in 10 other products

    		9.8
    CriticalCVE-2018-2879

    Oracle Access Manager: security vulnerability

    also in 1 other product

    		9.0
    CriticalCVE-2018-2739

    Oracle COREid Access: security vulnerability

    also in 1 other product

    		9.3
    MediumCVE-2021-29425

    Possible limited path traversal vulnerabily in Apache Commons IO

    also in 60 other products

    		4.8
    HighCVE-2022-39412

    Oracle Access Manager: security vulnerability

    also in 1 other product

    		7.5
    CriticalCVE-2026-71133

    Oracle Access Manager: security vulnerability

    also in 2 other products

    		10.0
    CriticalCVE-2026-73950

    Oracle Access Manager: security vulnerability

    also in 2 other products

    		9.8
    CriticalCVE-2026-73947

    Oracle Access Manager: security vulnerability

    also in 2 other products

    		9.8
    CriticalCVE-2026-73940

    Oracle Access Manager: security vulnerability

    also in 2 other products

    		9.8
    CriticalCVE-2026-73945

    Oracle Access Manager: security vulnerability

    also in 2 other products

    		9.9
    CriticalCVE-2026-70905

    Oracle Access Manager: Improper Authentication

    also in 2 other products

    		9.8
    CriticalCVE-2026-83001

    Oracle Access Manager: security vulnerability

    also in 2 other products

    		9.1
    CriticalCVE-2026-73946

    Oracle Access Manager: security vulnerability

    also in 2 other products

    		9.1
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    CriticalCVE-2026-60358

    Oracle Access Manager: Improper Access Control

    also in 2 other products

    		10.0
    CriticalCVE-2026-71163

    Oracle Access Manager: Denial of Service

    also in 2 other products

    		9.9
    CriticalCVE-2026-61065

    Oracle Access Manager: Improper Authentication

    also in 2 other products

    		9.8
    CriticalCVE-2026-60328

    Oracle Access Manager: Improper Authentication

    also in 2 other products

    		9.8
    CriticalCVE-2026-60355

    Oracle Access Manager: Missing Authentication for Critical Function

    also in 2 other products

    		9.8
    MediumCVE-2018-2587

    Oracle Access Manager: security vulnerability

    also in 2 other products

    		6.5
    CriticalCVE-2026-73944

    Oracle Access Manager: security vulnerability

    also in 2 other products

    		9.1
    CriticalCVE-2026-73962

    Oracle Access Manager: security vulnerability

    also in 2 other products

    		9.6
    CriticalCVE-2026-60333

    Oracle Access Manager: Improper Authentication

    also in 2 other products

    		9.9
    HighCVE-2026-73926

    Oracle Access Manager: security vulnerability

    also in 2 other products

    		8.7

    All vulnerabilities in search

    News

    All products by Oracle