PatchTheCEVidentity manager connector vulnerabilities and fixes
Recent CVEs affecting identity manager connector, with upgrade or downgrade steps. 8 tracked.
identity manager connector has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-08-18. Highest priority: CVE-2026-60990 (score 44/100).
- CVE-2026-60990 CRITICAL 9.9 DOWNGRADE Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core)
- CVE-2026-60995 CRITICAL 9.9 DOWNGRADE Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core)
- CVE-2026-60992 HIGH 8.1 DOWNGRADE Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core)
- CVE-2026-60996 HIGH 8.7 DOWNGRADE Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connect
- CVE-2026-60998 HIGH 8.0 DOWNGRADE Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microso
- CVE-2026-60993 HIGH 7.5 DOWNGRADE Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core)
- CVE-2026-60991 HIGH 7.8 DOWNGRADE Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core)
- CVE-2026-60994 HIGH 7.2 DOWNGRADE Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core)
FAQ
How do I fix identity manager connector vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is identity manager connector being exploited right now?
None of the tracked identity manager connector CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which identity manager connector CVE should I patch first?
CVE-2026-60990 currently ranks highest (44/100): Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).