CVE-2026-60426

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0

Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via LDAP to compromise the system. This issue can lead to unauthorized access to critical data or complete access to all accessible data within the directory. Additionally, it may allow unauthorized update, insert, or delete operations on some accessible data. The impact may extend beyond the directory to affect additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.