This vulnerability affects Oracle Unified Directory (OUD) in versions 12.2.1.4.0 and 14.1.2.1.0. It is an easily exploitable flaw that allows an attacker with high privileges and network access through LDAP to compromise the OUD product. The CVSS 3.1 base score is 7.2, indicating a high severity with impacts on confidentiality, integrity, and availability. The vulnerability is categorized under CWE-269 (Improper Privilege Management). Oracle's July 2026 Critical Patch Update advisory references this vulnerability but does not provide explicit patch or remediation information for it. No known exploits in the wild have been reported.

Successful exploitation allows a high privileged attacker with network access via LDAP to fully compromise Oracle Unified Directory, impacting confidentiality, integrity, and availability of the system. This can lead to complete takeover of the affected product.

Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory. However, no explicit patch or remediation details for this specific vulnerability are provided in the advisory content. Customers are strongly advised to review the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html and apply any relevant patches promptly. Until explicit patches are confirmed, monitor Oracle's advisories for updates. No vendor statement indicates that no action is required or that the issue is already mitigated.