# Oracle Access Manager


- [CVE-2021-35587](https://insights.sbomify.com/CVE-2021-35587/): Oracle Fusion Middleware Unspecified (critical 9.8, exploited in the wild)
- [CVE-2020-2555](https://insights.sbomify.com/CVE-2020-2555/): Oracle Multiple Products Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2026-71133](https://insights.sbomify.com/CVE-2026-71133/): Auth bypass in Oracle Access Manager (critical 10.0)
- [CVE-2026-60358](https://insights.sbomify.com/CVE-2026-60358/): Auth bypass in Oracle Access Manager (critical 10.0)
- [CVE-2026-71163](https://insights.sbomify.com/CVE-2026-71163/): Missing authorization in Oracle Access Manager (critical 9.9)
- [CVE-2026-73945](https://insights.sbomify.com/CVE-2026-73945/): Auth bypass in Oracle Access Manager (critical 9.9)
- [CVE-2026-60333](https://insights.sbomify.com/CVE-2026-60333/): Auth bypass in Oracle Access Manager (critical 9.9)
- [CVE-2026-35313](https://insights.sbomify.com/CVE-2026-35313/): Auth bypass in Oracle Access Manager (critical 9.9)
- [CVE-2026-73940](https://insights.sbomify.com/CVE-2026-73940/): Auth bypass in Oracle Access Manager (critical 9.8)
- [CVE-2026-73947](https://insights.sbomify.com/CVE-2026-73947/): Auth bypass in Oracle Access Manager (critical 9.8)
- [CVE-2026-73950](https://insights.sbomify.com/CVE-2026-73950/): Auth bypass in Oracle Access Manager (critical 9.8)
- [CVE-2026-70905](https://insights.sbomify.com/CVE-2026-70905/): Auth bypass in Oracle Access Manager (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/access-manager/