CVE-2026-60533 in Identity Manager Connector
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic Unix Connector). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with access to the physical communication segment attached to the hardware where the Oracle Identity Manager Connector executes to compromise Oracle Identity Manager Connector. While the vulnerability is in Oracle Identity Manager Connector, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Identity Manager Connector accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Identity Manager Connector. CVSS 3.1 Base Score 8.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H).
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 07/22/2026
The vulnerability under analysis affects Oracle Identity Manager Connector within Oracle Fusion Middleware, specifically the Generic Unix Connector component. This flaw exists in version 12.2.1.4.0 and 14.1.2.1.0, representing a significant security concern for organizations utilizing Oracle identity management solutions. The vulnerability's classification as difficult to exploit indicates that while it requires specific conditions to be successfully leveraged, the potential impact when exploited can be severe. The attack vector requires physical access to the communication segment connected to the hardware executing the Oracle Identity Manager Connector, which limits but does not eliminate the threat surface.
The technical nature of this vulnerability stems from insufficient authentication mechanisms within the connector's communication protocols. This allows an unauthenticated attacker positioned on the same physical network segment to compromise the system through a man-in-the-middle attack scenario. The flaw essentially eliminates the need for traditional authentication credentials, as the attacker can operate without proper authorization while still being able to execute malicious actions against the targeted connector. The vulnerability operates at a layer where network-level access can translate directly into system compromise, making it particularly dangerous in environments where physical security controls may be insufficient.
The operational impact of successfully exploiting this vulnerability extends beyond just the immediate Oracle Identity Manager Connector component. As indicated by the CVSS vector's scope change element, attacks can significantly affect additional products within the broader Oracle Fusion Middleware ecosystem. This cascading effect means that compromise of the connector could potentially lead to unauthorized access throughout the identity management infrastructure, creating a domino effect that extends far beyond the initial attack surface. The ability to create, delete, or modify critical data represents a severe integrity threat that could undermine the entire identity governance framework.
The availability impact of this vulnerability is equally concerning as it can result in complete denial of service conditions through system crashes or hangs. An attacker with successful exploitation can cause the connector to repeatedly crash or become unresponsive, effectively disabling the identity management functionality and potentially disrupting business operations that depend on proper user provisioning and access control mechanisms. The CVSS 3.1 base score of 8.0 reflects the high severity of both integrity and availability impacts, indicating that organizations should prioritize remediation efforts for this vulnerability.
Organizations should consider implementing network segmentation strategies to isolate Oracle Identity Manager Connector systems from general network traffic, reducing the attack surface available to physical network attackers. Network access control lists and firewall rules can help limit communication to only authorized endpoints, while monitoring solutions should be deployed to detect unusual patterns of activity that might indicate exploitation attempts. The vulnerability's classification aligns with CWE-310 (Cryptographic Issues) and CWE-287 (Improper Authentication) categories, demonstrating multiple weakness pathways that attackers can leverage. Additionally, this vulnerability maps to ATT&CK techniques including T1046 (Network Service Scanning) and T1566 (Phishing) as potential initial access vectors, though the physical network segment requirement makes direct exploitation more challenging but not impossible.
Mitigation strategies should include immediate patching of affected versions, implementation of network monitoring solutions specifically designed to detect unauthorized communication attempts to identity management systems, and review of existing physical security controls for network infrastructure. The recommended approach emphasizes layered defense mechanisms that address both the technical flaw through software updates while also implementing operational controls that reduce the likelihood of successful exploitation. Organizations should also conduct thorough risk assessments to understand how this vulnerability might interact with their specific deployment configurations and existing security controls.