{"id":"CVE-2026-91493","kind":"vulnerability","aliases":["CVE-2026-91493"],"related":[],"title":"Oracle Identity Manager Connector: LDAP Gateway flaw exposes data to unauthenticated attackers","description":"Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway).  Supported versions that are affected are 12.2.1.4.0 and  14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Identity Manager Connector.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Identity Manager Connector accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","summary":"Oracle Identity Manager Connector's LDAP Gateway component has a flaw that lets an unauthenticated attacker reach it over the network via LDAP. A successful attack gives access to critical data held by the connector, with a CVSS 3.1 score of 7.5 that is confidentiality-only.","severity":"high","cvss":7.5,"epss":0.00287,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["identity-management","ldap","oracle-fusion-middleware","oracle-identity-manager","vendor"],"not_affected_if":["other-versions"],"how_to_check":"- Identify whether Oracle Identity Manager Connector is deployed and which version runs, for example `12.2.1.4.0` or `14.1.2.1.0`\n- Check whether the LDAP Gateway component is enabled and reachable from the network\n- unknown for other checks, the sources do not give specific commands or paths","fix":"- Apply the Oracle Critical Patch Update for Oracle Fusion Middleware that covers Oracle Identity Manager Connector (affected versions `12.2.1.4.0` and `14.1.2.1.0`)\n- unknown for the exact patched version, the sources do not say","status":"open","published_at":"2026-10-20T22:20:53+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","triaged_at":"2026-10-25T03:18:17+00:00","updated_at":"2026-10-25T12:38:51+00:00","category":"vendor","confidence":0.7,"triage":{"at":"2026-10-25T03:18:17Z","model":"claude-haiku-5-5","output":{"fix":"- Apply the Oracle Critical Patch Update for Oracle Fusion Middleware that covers Oracle Identity Manager Connector (affected versions `12.2.1.4.0` and `14.1.2.1.0`)\n- unknown for the exact patched version, the sources do not say","reach":"network","title":"Oracle Identity Manager Connector: LDAP Gateway flaw exposes data to unauthenticated attackers","impact":"medium","summary":"Oracle Identity Manager Connector's LDAP Gateway component has a flaw that lets an unauthenticated attacker reach it over the network via LDAP. A successful attack gives access to critical data held by the connector, with a CVSS 3.1 score of 7.5 that is confidentiality-only.","category":"vendor","nicknames":[],"who_cares":["oracle-identity-manager","oracle-fusion-middleware","ldap","identity-management"],"confidence":0.7,"needs_auth":"no","worst_case":"Unauthenticated attacker reads critical connector data over LDAP","analyst_note":"Check the Oracle Security Alert or CPU advisory for the patched version and whether LDAP Gateway is enabled by default; the NVD entry alone gives no fix version.","how_to_check":"- Identify whether Oracle Identity Manager Connector is deployed and which version runs, for example `12.2.1.4.0` or `14.1.2.1.0`\n- Check whether the LDAP Gateway component is enabled and reachable from the network\n- unknown for other checks, the sources do not give specific commands or paths","needs_analyst":true,"not_affected_if":["other-versions"],"who_is_affected":"Organizations running Oracle Identity Manager Connector versions 12.2.1.4.0 or 14.1.2.1.0 with the LDAP Gateway component reachable over the network. The sources do not say which configurations expose the LDAP Gateway by default, so check the deployment before ruling out exposure.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000705,"input_tokens":3492,"output_tokens":712,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-91493':15A,18A '/av':154C '12.2.1.4.0':99C '14.1.2.1.0':101C '3.1':70B,144C,153C '7.5':73B,147C 'access':59B,110C,128C,134C,141C 'affect':97C 'allow':105C 'attack':12A,47B,57B,107C,120C 'base':145C 'complet':133C 'compon':39B,90C 'compromis':114C 'confidenti':77B,148C 'confidentiality-on':76B 'connector':4A,35B,66B,84C,118C,140C 'critic':61B,130C 'cve':13A,16A 'cvss':69B,143C,150C,152C 'data':9A,62B,131C,142C 'easili':102C 'exploit':103C 'expos':8A 'flaw':7A,42B 'fusion':25B,88C 'gateway':6A,38B,92C 'give':58B 'h/i':160C 'held':63B 'ident':2A,20B,29B,33B,82C,116C,138C 'identity-manag':19B 'impact':149C 'l/pr':156C 'ldap':5A,22B,37B,54B,91C,112C 'let':44B 'manag':3A,21B,30B,34B,83C,117C,139C 'middlewar':26B,89C 'n':162C 'n/a':161C 'n/ac':155C 'n/s':158C 'n/ui':157C 'network':52B,109C 'oracl':1A,24B,28B,32B,81C,87C,115C,137C 'oracle-fusion-middlewar':23B 'oracle-identity-manag':27B 'product':85C 'reach':48B 'result':125C 'score':71B,146C 'success':56B,119C 'support':93C 'u/c':159C 'unauthent':11A,46B,106C 'unauthor':127C 'vector':151C 'vendor':31B 'version':94C 'via':53B,111C 'vulner':78C,104C,123C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Oracle Identity Manager Connector versions 12.2.1.4.0 or 14.1.2.1.0 with the LDAP Gateway component reachable over the network. The sources do not say which configurations expose the LDAP Gateway by default, so check the deployment before ruling out exposure.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T22:20:53+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_by":"secalert_us@oracle.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91493","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91493","severity":null,"published_at":"2026-10-20T22:20:53+00:00","modified_at":"2026-10-21T18:44:55+00:00","first_seen_at":"2026-10-23T21:57:27+00:00","fetched_at":"2026-10-23T22:29:00+00:00","note":null},{"source":"epss","external_id":"CVE-2026-91493","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-91493","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:51+00:00","fetched_at":"2026-10-25T12:38:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}