A high severity vulnerability in Oracle Identity Manager enables low privileged attackers to compromise the system through network-based T3 or IIOP protocol exploitation.

This vulnerability resides in the OIM Legacy UI component. It allows an attacker with low privileges to leverage T3 or IIOP network protocols to execute a full takeover of the Oracle Identity Manager environment.

The potential for a complete system takeover makes this vulnerability a significant threat to business continuity and data security. With a CVSS score of 8.8, successful exploitation could allow an attacker to bypass security controls, leading to the compromise of entire identity stores and administrative functions managed by the software.

Immediate Action: Apply the relevant security updates provided in the August 2026 Oracle security advisory to all affected instances of Oracle Identity Manager.

Proactive Monitoring: Monitor internal network traffic for unusual T3 or IIOP traffic patterns, as these protocols are commonly used for inter-process communication in middleware environments.

Compensating Controls: Restrict network access to the T3 and IIOP ports to known, trusted management hosts to reduce the attack surface.

Public Exploit Available: No

Organizations should proceed with the installation of official patches as soon as they are made available by the vendor. Limiting access to management ports remains a critical defensive measure while the remediation process is underway.