Threats affecting pkg:maven/com.oracle/fusion-middleware-internet-directory

A critical vulnerability exists in Oracle Internet Directory (OID) component of Oracle Fusion Middleware, specifically in the OID LDAP Server. The flaw affects versions 12.2.1.4.0 and 14.1.2.1.0 and allows a low-privileged attacker with network access via LDAP to compromise the Oracle Internet Directory. Successful exploitation can lead to full takeover of the Oracle Internet Directory, impacting confidentiality, integrity, and availability. Oracle has released security patches addressing this vulnerability as part of their September 2026 Critical Security Patch Update.

A critical vulnerability exists in Oracle Internet Directory (OID) component of Oracle Fusion Middleware, specifically in the OID LDAP Server. It affects versions 12.2.1.4.0 and 14.1.2.1.0. The flaw allows a low-privileged attacker with network access via LDAP to compromise the Oracle Internet Directory, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 9.9, indicating high confidentiality, integrity, and availability impacts. Oracle has released patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.