CVE-2026-35312

Name of the Vulnerable Software and Affected Versions Oracle Virtual Directory version 12.2.1.4.0 Oracle Virtual Directory version 14.1.2.0.0

Description An issue exists in the Virtual Directory Server component of the Oracle Fusion Middleware Oracle Virtual Directory product. An unauthenticated attacker with network access via LDAP (Lightweight Directory Access Protocol, a protocol for accessing and maintaining distributed directory information services) can compromise the system. Successful exploitation can result in a complete takeover of Oracle Virtual Directory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.