Oracle Identity Manager Connector (OCI) is vulnerable through its Generic REST component. The flaw allows an attacker with low privilege and logged‑on access to the infrastructure that hosts OCI to compromise the connector instance. Successful exploitation lets the attacker create, delete, or modify data, or gain unauthorized read access to all data stored or processed by the connector. The impact covers confidentiality and integrity, as the embedded CVSS vector indicates a high confidentiality and integrity impact. Multiple data sets managed by OCI are at risk.

This issue affects Oracle's Identity Manager Connector package within Oracle Fusion Middleware, specifically versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is tied to the Generic REST component that is used for data exchange and authentication between Oracle Identity Manager and external systems. Systems running these releases should be considered at risk until patched.

The CVSS v3.1 base score of 7.1 classifies it as high severity. EPSS < 1% indicates a low estimated exploitation probability, and it is not listed in the CISA KEV catalog. The attack requires local access; the attacker must already be able to log into the host that runs OCI. If this condition is met, exploitation is straightforward and can lead to compromise of sensitive identity data. While the vulnerability is not yet commonly observed, the high impact and the requirement of only low privilege suggest that it should be prioritized for remediation.