CVE-2026-87337

Summary

Oracle Access Manager's Authentication Engine has a critical vulnerability allowing unauthenticated attackers to gain full access to sensitive data and modify critical system information. This flaw affects versions 12.2.1.4.0 and 14.1.2.1.0, making it particularly dangerous for organizations relying on Oracle Fusion Middleware for identity management.

Exploitability

The vulnerability is easily exploitable with no authentication required, allowing attackers to access the system via HTTP network connections.

Blast radius

Successful exploitation could lead to unauthorized modification or deletion of critical data across multiple Oracle Access Manager accessible systems, potentially affecting the entire Oracle Fusion Middleware ecosystem.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Oracle Access Manager 14.1.2.1.0 or later to remediate this vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.