CVE-2026-60359: High severity Oracle Oracle Unified Directory vulnerability
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Unified Directory. While the vulnerability is in Oracle Unified Directory, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Unified Directory accessible data. CVSS 3.1 Base Score 8.6 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60359?
The severity of CVE-2026-60359 is high with a score of 8.6.
How do I fix CVE-2026-60359?
To fix CVE-2026-60359, upgrade to a supported version of Oracle Unified Directory that is not affected.
What systems are affected by CVE-2026-60359?
CVE-2026-60359 affects Oracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0.
What type of attack is possible with CVE-2026-60359?
CVE-2026-60359 allows unauthenticated attackers with network access via HTTP to compromise the Oracle Unified Directory.
Is there any known mitigation for CVE-2026-60359?
There are no known mitigations for CVE-2026-60359, and upgrading is the only recommended action.