Threat Intelligence Database

CVE-2026-60969 is a high-severity vulnerability in Oracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with network access via LDAP to compromise the product, potentially leading to unauthorized access to critical or all accessible data within Oracle Unified Directory. The vulnerability has a CVSS 3.1 base score of 7.7, indicating significant confidentiality impact without affecting integrity or availability. The vulnerability may also impact additional Oracle products due to scope change. Oracle has released a Critical Security Patch Update in August 2026 addressing this and many other vulnerabilities. Customers are strongly advised to apply the available patches promptly.

CVE-2026-60914 is a high-severity vulnerability in Oracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with network access via LDAP to gain unauthorized access to critical data or potentially all data accessible through Oracle Unified Directory. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring user interaction or privileges. Oracle has acknowledged this vulnerability in their August 2026 Critical Security Patch Update advisory and strongly recommends applying available patches promptly.

CVE-2026-60895 is a vulnerability in Oracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0 that allows a low privileged attacker with network access via LDAP to potentially compromise the system. Exploitation could lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible by Oracle Unified Directory. The vulnerability has a CVSS 3.1 base score of 6.8, indicating a medium severity level. The attack complexity is high, requiring network access and low privileges, with no user interaction needed. Oracle has included this vulnerability in its August 2026 Critical Security Patch Update, which contains numerous security fixes across many products.

CVE-2026-60889 is a high-severity vulnerability in Oracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with network access via LDAP to compromise the directory, potentially gaining unauthorized access to critical or all accessible data. The vulnerability has a CVSS 3.1 base score of 7.5, indicating significant confidentiality impact without requiring privileges or user interaction.

CVE-2026-60850 is a high-severity vulnerability in Oracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0. It allows an unauthenticated attacker with network access via LDAP to gain unauthorized access to critical or all accessible data within Oracle Unified Directory. The vulnerability has a CVSS 3.1 base score of 7.5, indicating significant confidentiality impact without affecting integrity or availability. Oracle has acknowledged this vulnerability in their August 2026 Critical Security Patch Update advisory and strongly recommends applying available patches promptly.

CVE-2026-60849 is a high-severity vulnerability in Oracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with network access via LDAP to potentially take over the Oracle Unified Directory. The vulnerability impacts confidentiality, integrity, and availability, and may also affect additional Oracle products due to scope change. The vulnerability is difficult to exploit and requires high attack complexity. Oracle has released a Critical Security Patch Update addressing this and many other vulnerabilities.

CVE-2026-60841 is a high-severity vulnerability in Oracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0. It allows a low privileged attacker with network access via LDAP to compromise the product, potentially leading to a full takeover. The vulnerability impacts confidentiality, integrity, and availability, and may affect additional Oracle products due to scope change. Oracle has published a Critical Security Patch Update addressing this and many other vulnerabilities.

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. While the vulnerability is in Oracle Unified Directory, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Unified Directory. CVSS 3.1 Base Score 9.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H).