CVE-2026-83061
CriticalCVSS 9.8Summary
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can compromise Oracle Internet Directory.
Risk Assessment
Critical risk — an unauthenticated attacker can take over the directory service, potentially leading to full compromise of confidentiality, integrity, and availability. CVSS 9.8.
Recommendation
Apply the available Oracle patches for versions 12.2.1.4.0 and 14.1.2.1.0 as soon as possible and restrict network access to the LDAP service.
Other vulnerabilities in Oracle Internet Directory
See all- CVE-2026-83066Critical
Vulnerability in Oracle Internet Directory (component: OID LDAP Server) affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via T3 or IIOP can compromise Oracle Internet Directory. CVSS 3.1 Base Score is 9.8.
- CVE-2026-83062Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can compromise Oracle Internet Directory.
- CVE-2026-83060Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can compromise Oracle Internet Directory.
- CVE-2026-83059Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can compromise Oracle Internet Directory, and attacks may significantly impact additional products (scope change).
- CVE-2026-83058Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. A low privileged attacker with network access via LDAP can compromise Oracle Internet Directory, and attacks may significantly impact additional products (scope change).
- CVE-2026-83057Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. A low privileged attacker with network access via LDAP can compromise Oracle Internet Directory, and attacks may significantly impact additional products (scope change).
- CVE-2026-83056Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. A low privileged attacker with network access via LDAP can compromise Oracle Internet Directory, and attacks may significantly impact additional products (scope change).
- CVE-2026-83055Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. A low privileged attacker with network access via LDAP can compromise Oracle Internet Directory, and attacks may significantly impact additional products (scope change).
- CVE-2026-83054Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can compromise Oracle Internet Directory.
- CVE-2026-61258Critical
Vulnerability in Oracle Internet Directory (component: OID LDAP Server). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows an unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory. CVSS 3.1 Base Score 9.8.
Original NVD description (English source)
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory. Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).