Unified Directory vulnerabilities

31 known vulnerabilities in Unified Directory from Oracle. 31 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

31vulnerabilities

8critical

23high

0exploited

8.6average CVSS score

Latest first

7.7 High severity
Oracle Unified Directory: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-60969Aug 18, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via
7.5 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60914Aug 18, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
7.5 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60889Aug 18, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
7.5 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60850Aug 18, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
8.5 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60849Aug 18, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access v
8.5 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60841Aug 18, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access v
8.1 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60520Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via
7.2 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60519Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access vi
8.7 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60437Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access vi
7.5 High severity
Oracle Unified Directory: Uncontrolled Resource Consumption
CVE-2026-60436Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
8.8 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60430Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via
9.9 Critical severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60429Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via
8.2 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60428Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
8.7 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60427Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access
8.5 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60426Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via
7.5 High severity
Oracle Unified Directory: Uncontrolled Resource Consumption
CVE-2026-60425Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
9.0 Critical severity
Oracle Unified Directory: Missing Authentication for Critical Functionality
CVE-2026-60424Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access
8.8 High severity
Oracle Unified Directory: Improper Authentication
CVE-2026-60423Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via
9.9 Critical severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60422Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). The supported version that is affected is 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compr
8.2 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60421Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access v
8.5 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-60420Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via
8.8 High severity
Oracle Unified Directory: Improper Privilege Management
CVE-2026-60419Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via
7.2 High severity
Oracle Unified Directory: Improper Privilege Management
CVE-2026-60418Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access vi
8.1 High severity
Oracle Unified Directory: Missing Authentication for Critical Functionality
CVE-2026-60417Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access
9.8 Critical severity
Oracle Unified Directory: Missing Authentication for Critical Functionality
CVE-2026-60362Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
9.9 Critical severity
Oracle Unified Directory: Missing Authentication for Critical Functionality
CVE-2026-60361Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via
10.0 Critical severity
Oracle Unified Directory: Missing Authentication for Critical Functionality
CVE-2026-60360Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
8.6 High severity
Oracle Unified Directory: Missing Authentication for Critical Functionality
CVE-2026-60359Jul 21, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
8.6 High severity
Oracle Unified Directory: Improper Access Control
CVE-2026-46776Jun 17, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
9.8 Critical severity
Oracle Unified Directory: Improper Access Control
CVE-2026-46774Jun 17, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi
9.8 Critical severity
Oracle Unified Directory: Improper Access Control
CVE-2026-46773Jun 17, 2026Oracle
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi