Oracle Product Security Update Advisory (CVE-2026-21992)

Oracle Product Security Update Advisory (CVE-2026-21992)

overview

We have released security updates that address vulnerabilities in Oracle products. users of affected products are encouraged to update to the latest version.

affected products

CVE-2026-21992

Oracle Identity Manager Version: 12.2.1.4.0
Oracle Identity Manager Version: 14.1.2.1.0
Oracle Web Services Manager Version: 12.2.1.4.0
Oracle Web Services Manager version: 14.1.2.1.0

resolved Vulnerabilities

Remote code execution vulnerability in Oracle Identity Manager and Oracle Web Services Manager (CVE-2026-21992)

vulnerability patches

Vulnerability patches have been made available in the latest update. please follow the instructions on the reference site to update to the latest version of the vulnerability patch.

CVE-2026-21992

Oracle Identity Manager versions: Check the reference site to apply the patch[1]
Oracle Web Services Manager versions: Check the reference site to apply the patch[1]

reference site

[1] Oracle Security Alert Advisory – CVE-2026-21992
https://www.oracle.com/security-alerts/alert-cve-2026-21992.html