Threats affecting pkg:maven/com.oracle.fusionmiddleware/oracle-internet-directory

A critical vulnerability exists in Oracle Internet Directory (OID) component of Oracle Fusion Middleware, specifically in the OID LDAP Server. The flaw affects versions 12.2.1.4.0 and 14.1.2.1.0 and allows a low privileged attacker with network access via LDAP to potentially take over the Oracle Internet Directory. The vulnerability has a CVSS 3.1 base score of 9.9, indicating high impact on confidentiality, integrity, and availability. Oracle has released a Critical Security Patch Update in September 2026 addressing this and other vulnerabilities across multiple products.