CVE-2026-46776
HighCVSS 8.6Exploitation Probability (EPSS)
Low risk29th percentile — higher than 29% of all known CVEs
Summary
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware allows unauthenticated attackers with network access via LDAP to compromise the system. Successful attacks can lead to unauthorized creation, deletion, or modification of data and partial denial of service.
Risk Assessment
The organization may face serious data breaches, leading to loss of integrity and availability of critical information. Additionally, attackers may gain unauthorized access to data, increasing the risk of information leakage.
Recommendation
It is recommended to update to the latest version of Oracle Unified Directory and implement appropriate security measures to restrict LDAP access to authorized users only.
Original NVD description (English source)
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Unified Directory accessible data as well as unauthorized read access to a subset of Oracle Unified Directory accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Unified Directory. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L).