Oracle Oracle Identity Manager
productNLA product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
67critical79high14medium3low
updated 2026-10-28
01
vulnerabilities (181)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-21962US | —OT critical | KEV |
| CVE-2021-45105US | medium5.9 | Exploit |
| CVE-2025-66516US | critical9.8 | Exploit |
| CVE-2025-54988US | — | Exploit |
| CVE-2025-48976US | — | Exploit |
| CVE-2025-48924US | — | Exploit |
| CVE-2025-55163US | high7.5 | Exploit |
| CVE-2025-23048US | — | Exploit |
| CVE-2025-54874US | critical9.8 | Exploit |
| CVE-2026-70748US | critical9.8OT high | Exploit |
| CVE-2025-41249US | —OT elevated | Exploit |
| CVE-2025-5115US | high7.5 | — |
| CVE-2025-49796US | — | — |
| CVE-2025-59375US | — | — |
| CVE-2025-31672US | — | — |
| CVE-2024-47554US | — | — |
| CVE-2026-21992US | —OT elevated | — |
| CVE-2025-53864US | — | — |
| CVE-2024-43204US | — | — |
| CVE-2025-4949US | medium5.3 | — |
| CVE-2024-42516US | — | — |
| CVE-2024-47252US | — | — |
| CVE-2024-13009US | — | — |
| CVE-2024-56406US | — | — |
| CVE-2026-83099US | critical10.0OT elevated | — |
| CVE-2026-83059US | critical10.0OT elevated | — |
| CVE-2026-83021US | critical10.0OT elevated | — |
| CVE-2026-71133US | critical10.0OT elevated | — |
| CVE-2026-83339US | critical9.8OT elevated | — |
| CVE-2026-83108US | critical9.8OT elevated | — |
| CVE-2026-83100US | critical9.8OT elevated | — |
| CVE-2026-83098US | critical9.8OT elevated | — |
| CVE-2026-83095US | critical9.8OT elevated | — |
| CVE-2026-83094US | critical9.8OT elevated | — |
| CVE-2026-83066US | critical9.8OT elevated | — |
| CVE-2026-83062US | critical9.8OT elevated | — |
| CVE-2026-83061US | critical9.8OT elevated | — |
| CVE-2026-83060US | critical9.8OT elevated | — |
| CVE-2026-83054US | critical9.8OT elevated | — |
| CVE-2026-83042US | critical9.8OT elevated | — |
| CVE-2026-83037US | critical9.8OT elevated | — |
| CVE-2026-83036US | critical9.8OT elevated | — |
| CVE-2026-83035US | critical9.8OT elevated | — |
| CVE-2026-73963US | critical9.8OT elevated | — |
| CVE-2026-73956US | critical9.8OT elevated | — |
| CVE-2026-73953US | critical9.8OT elevated | — |
| CVE-2026-73950US | critical9.8OT elevated | — |
| CVE-2026-73947US | critical9.8OT elevated | — |
| CVE-2026-73940US | critical9.8OT elevated | — |
| CVE-2026-70913US | critical9.8OT elevated | — |
showing 50 of 181
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-284Improper Access Control91 CVEs
- CWE-306Missing Authentication for Critical Function42 CVEs
- CWE-287Improper Authentication40 CVEs
- CWE-400Uncontrolled Resource Consumption12 CVEs
- CWE-269Improper Privilege Management9 CVEs
- CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
- CWE-20Improper Input Validation3 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
03
sources (1)
Which sources assert this record, and when.
- NLNCSC-NL (CSAF)181 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan