Threats affecting pkg:maven/com.oracle/fusion-middleware-oracle-internet-directory

A critical vulnerability exists in Oracle Internet Directory (OID) within Oracle Fusion Middleware, specifically in the OID LDAP Server component. The flaw affects versions 12.2.1.4.0 and 14.1.2.1.0 and allows a low-privileged attacker with network access via LDAP to compromise the OID. Successful exploitation can lead to full takeover of Oracle Internet Directory, impacting confidentiality, integrity, and availability. Oracle has released patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.