Oracle Unified Directory vulnerabilities
26 known CVE vulnerabilities in Oracle Unified Directory, translated and rated.
- CVE-2026-60429Critical
Vulnerability in Oracle Unified Directory (component: OUD Core). Affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable by a low privileged attacker with network access via LDAP. Attacks may impact additional products (scope change). Successful attack can lead to full system takeover.
- CVE-2026-60424Critical
Vulnerability in Oracle Unified Directory (OUD Core component) versions 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit, allows an unauthenticated attacker via LDAP to take over the system, with impact on other products (scope change).
- CVE-2026-60422Critical
Vulnerability in Oracle Unified Directory (component: OUD Core) allows a low-privileged attacker via LDAP to gain unauthorized access to critical data, modify it, and cause partial denial of service. CVSS 9.9.
- CVE-2026-60362Critical
Vulnerability in Oracle Unified Directory (OUD Core component). An unauthenticated attacker with network access via LDAP can compromise the directory.
- CVE-2026-60361Critical
Vulnerability in Oracle Unified Directory (OUD Core component) allows a low-privileged attacker to remotely take over the system via LDAP. The attack may impact additional products (scope change).
- CVE-2026-60360Critical
Critical vulnerability in Oracle Unified Directory (OUD Core component) allows an unauthenticated attacker to remotely take over the server via network using LDAP. The attack may impact additional products (scope change).
- CVE-2026-60969High
Vulnerability in Oracle Unified Directory (component: OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, allows low-privileged attacker via LDAP to gain unauthorized access to critical data, with potential impact on other products.
- CVE-2026-60914High
Vulnerability in Oracle Unified Directory (OUD Core component) versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker can gain unauthorized access to critical data via LDAP. The attack does not extend beyond this product (no scope change).
- CVE-2026-60895Medium
Vulnerability in Oracle Unified Directory (component: OUD Core) affects versions 12.2.1.4.0 and 14.1.2.1.0. It is difficult to exploit, requires low privileges and LDAP access, allowing unauthorized creation, deletion, or modification of critical data and full access to data.
- CVE-2026-60889High
Vulnerability in Oracle Unified Directory (component: OUD Core) affects versions 12.2.1.4.0 and 14.1.2.1.0. It is easily exploitable by an unauthenticated attacker remotely via LDAP. Successful attacks can result in unauthorized access to critical data or complete access to all data in Oracle Unified Directory.
- CVE-2026-60850High
Vulnerability in Oracle Unified Directory (component: OUD Core) affects versions 12.2.1.4.0 and 14.1.2.1.0. It is easily exploitable by an unauthenticated attacker remotely via LDAP. Successful attacks can result in unauthorized access to critical data or complete access to all data in Oracle Unified Directory.
- CVE-2026-60849High
Vulnerability in Oracle Unified Directory (component: OUD Core) affects versions 12.2.1.4.0 and 14.1.2.1.0. It is difficult to exploit by a low-privileged attacker remotely via LDAP. Successful attacks can result in complete takeover of Oracle Unified Directory and may also impact other products (scope change).
- CVE-2026-60841High
Vulnerability in Oracle Unified Directory (component: OUD Core) affects versions 12.2.1.4.0 and 14.1.2.1.0. It is difficult to exploit by a low-privileged attacker remotely via LDAP. Successful attacks can result in complete takeover of Oracle Unified Directory and may also impact other products (scope change).
- CVE-2026-60520High
Vulnerability in Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Affects versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via LDAP can compromise data confidentiality and integrity.
- CVE-2026-60519High
Vulnerability in Oracle Unified Directory from Oracle Fusion Middleware (component: OUD Core). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. A high-privileged attacker with network access via LDAP can easily exploit this vulnerability, potentially leading to full system takeover.
- CVE-2026-60436High
Vulnerability in Oracle Unified Directory (Fusion Middleware). Unauthenticated attacker via LDAP can cause a complete denial of service (DOS).
- CVE-2026-60430High
Vulnerability in Oracle Unified Directory (OUD Core component) allows a low-privileged attacker to take over the system over the network via LDAP. Versions 12.2.1.4.0 and 14.1.2.1.0 are affected.
- CVE-2026-60426High
Vulnerability in Oracle Unified Directory (OUD Core component) allows a low-privileged attacker with network access via LDAP to gain unauthorized access to critical data and modify some data. The attack may impact additional products (scope change).
- CVE-2026-60425High
Vulnerability in Oracle Unified Directory (OUD Core component) allows an unauthenticated attacker with network access via LDAP to cause a complete denial of service (DOS) through hangs or frequent crashes.
- CVE-2026-60423High
Vulnerability in Oracle Fusion Middleware's Oracle Unified Directory product (component: OUD Core). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via LDAP to compromise Oracle Unified Directory.
- CVE-2026-60421High
Vulnerability in Oracle Unified Directory (component: OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0. It is difficult to exploit, requires low privileges and network access via LDAP. Attack may affect additional products (scope change) and lead to unauthorized creation, deletion or modification of critical data and access to it.
- CVE-2026-60420High
Vulnerability in Oracle Unified Directory (component: OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged attacker with network access via LDAP can access critical data and modify it, also impacting other products.
- CVE-2026-60419High
Vulnerability in Oracle Fusion Middleware's Oracle Unified Directory product (component: OUD Core). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via LDAP to compromise Oracle Unified Directory.
- CVE-2026-60418High
Vulnerability in Oracle Unified Directory (component: OUD Core). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via LDAP to take over the system.
- CVE-2026-60417High
Vulnerability in Oracle Unified Directory (OUD Core component) allows an unauthenticated attacker via LDAP to take over the system. Exploitation is difficult.
- CVE-2026-60359High
Vulnerability in Oracle Unified Directory (OUD Core component) allows an unauthenticated attacker to remotely access critical data. The attack may impact other products.

