CVE-2026-60437

Name of the Vulnerable Software and Affected Versions Oracle Unified Directory versions 12.2.1.4.0 Oracle Unified Directory versions 14.1.2.1.0

Description A flaw in the OUD Core component of Oracle Fusion Middleware allows a high privileged attacker with network access via LDAP to compromise the system. This issue can lead to unauthorized creation, deletion, or modification of critical data and all data accessible by the directory. Additionally, it can result in a complete Denial of Service (DOS), characterized by a system hang or frequently repeatable crashes. The impact may extend beyond the directory to affect additional integrated products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.