Threats tagged 'ghsa-vj32-5gf7-7mv4'

A critical vulnerability exists in Oracle Internet Directory (OID) component of Oracle Fusion Middleware, specifically in the OID LDAP Server. It affects versions 12.2.1.4.0 and 14.1.2.1.0. The flaw allows a low-privileged attacker with network access via LDAP to compromise the Oracle Internet Directory, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 9.9, indicating high confidentiality, integrity, and availability impacts. Oracle has released patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.