PT-2026-49907 · Oracle · Oracle Unified Directory

CVE-2026-46773

·

Published

2026-06-16

·

Updated

2026-06-19

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0
Description An issue in the OUD Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via LDAP (Lightweight Directory Access Protocol) to compromise the system. Successful exploitation can lead to a complete takeover of the Oracle Unified Directory.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2026-08659
CVE-2026-46773

Affected Products

Oracle Unified Directory