CVE-2026-83063

HighCVSS 7.2

Published: 15/09/2026(UTC)Updated: 17/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

30th percentile - higher than 30% of all known CVEs

Summary

Vulnerability in Oracle Internet Directory (component: OID LDAP Server) affects versions 12.2.1.4.0 and 14.1.2.1.0. A high-privileged attacker can exploit it over LDAP, potentially leading to full takeover. CVSS score is 7.2, indicating high impact on confidentiality, integrity, and availability.

Risk Assessment

The risk includes potential full takeover of the LDAP directory, compromising all security aspects and authentication data.

Recommendation

Update Oracle Internet Directory to a patched version and monitor LDAP access for suspicious activity.

Other vulnerabilities in Oracle Internet Directory

See all

Original NVD description (English source)

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via LDAP to compromise Oracle Internet Directory. Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS