CVE-2026-83066
CriticalCVSS 9.8Summary
Vulnerability in Oracle Internet Directory (component: OID LDAP Server) affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via T3 or IIOP can compromise Oracle Internet Directory. CVSS 3.1 Base Score is 9.8.
Risk Assessment
The risk is critical as an attacker can fully take over Oracle Internet Directory, potentially leading to loss of confidentiality, integrity, and availability of directory data.
Recommendation
Apply Oracle patches for affected versions. Restrict network access to T3 and IIOP services and monitor traffic on these protocols.
Other vulnerabilities in Oracle Internet Directory
See all- CVE-2026-83062Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can compromise Oracle Internet Directory.
- CVE-2026-83061Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can compromise Oracle Internet Directory.
- CVE-2026-83060Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can compromise Oracle Internet Directory.
- CVE-2026-83059Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can compromise Oracle Internet Directory, and attacks may significantly impact additional products (scope change).
- CVE-2026-83058Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. A low privileged attacker with network access via LDAP can compromise Oracle Internet Directory, and attacks may significantly impact additional products (scope change).
- CVE-2026-83057Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. A low privileged attacker with network access via LDAP can compromise Oracle Internet Directory, and attacks may significantly impact additional products (scope change).
- CVE-2026-83056Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. A low privileged attacker with network access via LDAP can compromise Oracle Internet Directory, and attacks may significantly impact additional products (scope change).
- CVE-2026-83055Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. A low privileged attacker with network access via LDAP can compromise Oracle Internet Directory, and attacks may significantly impact additional products (scope change).
- CVE-2026-83054Critical
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Affects versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can compromise Oracle Internet Directory.
- CVE-2026-61258Critical
Vulnerability in Oracle Internet Directory (component: OID LDAP Server). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows an unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory. CVSS 3.1 Base Score 9.8.
Original NVD description (English source)
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Internet Directory. Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).