Threats affecting pkg:maven/com.oracle.directory/oracle-unified-directory

CVE-2026-46776 is a high-severity vulnerability in Oracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with network access via LDAP to compromise the product. Exploitation can lead to unauthorized creation, deletion, or modification of critical data, unauthorized read access to some data, and partial denial of service. The vulnerability has a CVSS 3.1 base score of 8.6. Oracle has acknowledged the issue in its June 2026 Critical Security Patch Update advisory but has not explicitly confirmed patch availability for this specific vulnerability. Oracle strongly recommends applying the Critical Security Patch Update promptly to mitigate risks. Until patches are applied, risk reduction may be possible by blocking required network protocols or restricting privileges, though these measures may impact functionality.

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromise Oracle Unified Directory. Successful attacks of this vulnerability can result in takeover of Oracle Unified Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can result in takeover of Oracle Unified Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).