Skip to content

Identity & Access Management · head-to-head

Microsoft Identity vs Oracle Identity

On-prem IAM/IGA/PAM/MFA: directories, federation, privileged access, SSO. Counts are scoped to this segment and the selected published-date window. Oracle Identity carries 10.5× the disclosed CVE volume of Microsoft Identity. Volume reflects disclosure practice and install base as much as code quality — read it with the severity mix. Sourced from the NIST NVD; lower counts indicate a smaller disclosed vulnerability surface — not necessarily lower risk.

01

Disclosure record

Bars are normalized per row to the larger value; the leading count is emphasized.

Metric comparison: Microsoft Identity versus Oracle Identity. Each row gives the metric, Microsoft Identity’s count on the left and Oracle Identity’s count on the right.
Microsoft IdentityMetricOracle Identity
2Total CVEs21
0Critical7
1High6
1Medium8
0Low0
6Open in latest104
02

Risk profile

Each severity band as a share of the vendor's own total — strips out raw volume so the profiles compare directly.

Microsoft Identity

0.0% critical
Critical
00.0%
High
150.0%
Medium
150.0%
Low
00.0%

Oracle Identity

33.3% critical
Critical
733.3%
High
628.6%
Medium
838.1%
Low
00.0%
03

Recent activity

Latest in-window disclosures per vendor, newest first. Each ID links to its NVD record.

Microsoft Identity

Recent CVEs affecting Microsoft Identity
CVESeverityCVSSPublished
CVE-2025-26685(opens NVD record)Medium
6.5
May 13, 2025
CVE-2021-36949(opens NVD record)High
7.1
Aug 12, 2021

Oracle Identity

Recent CVEs affecting Oracle Identity
CVESeverityCVSSPublished
CVE-2026-46812(opens NVD record)Medium
6.1
Jun 17, 2026
CVE-2026-46810(opens NVD record)Medium
6.5
Jun 17, 2026
CVE-2026-46807(opens NVD record)Critical
9.8
Jun 17, 2026
CVE-2026-35314(opens NVD record)High
7.3
Jun 17, 2026
CVE-2026-35313(opens NVD record)Critical
9.9
Jun 17, 2026
CVE-2026-35294(opens NVD record)Critical
9.9
Jun 17, 2026

Track new CVEs for these vendors

Get an email the moment a new vulnerability is disclosed for the products you rely on.

Get alerts