CVE-2026-34285 - Vulnerability Analysis

Overview

Oracle Identity Manager Connector 12.2.1.4.0 contains an unauthorized access vulnerability caused by improper access control, letting unauthenticated network attackers via HTTPS create, delete, or modify critical data.

Severity & Score

Impact

Unauthenticated attackers can create, delete, or modify critical data, leading to full data compromise.

Mitigation

Update to the latest available version.

References

• https://www.oracle.com/security-alerts/cpuapr2026.html

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 22, 2026

🔴 CVE-2026-34285 - Critical (9.1) Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network acc... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-34285/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner