This vulnerability affects Oracle Unified Directory (OUD) in versions 12.2.1.4.0 and 14.1.2.1.0. It is an easily exploitable flaw that allows an attacker with high privileges and network access via LDAP to compromise the OUD product. The CVSS 3.1 base score is 7.2, indicating high severity with impacts on confidentiality, integrity, and availability. The vulnerability is categorized under CWE-284 (Improper Access Control). Oracle's July 2026 Critical Patch Update advisory mentions multiple security patches but does not explicitly state the patch status for this specific vulnerability in the provided excerpt.

Successful exploitation can lead to complete compromise of Oracle Unified Directory, affecting confidentiality, integrity, and availability of the system. This could allow an attacker to take over the directory service, potentially impacting authentication and directory data.

Oracle has released a Critical Patch Update in July 2026 that addresses multiple vulnerabilities including this one. However, the provided advisory content does not explicitly confirm patch availability or remediation for CVE-2026-60519. Customers are strongly advised to review the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for detailed patch information and apply relevant patches promptly. Until official patches are confirmed and applied, restrict network access to LDAP interfaces to trusted administrators only.