CVE-2026-60417: High severity Oracle Oracle Unified Directory vulnerability
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can result in takeover of Oracle Unified Directory. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle Fusion Middleware - Oracle Unified Directory (OUD Core)to a version that resolves this vulnerability.Fixed in 12.2.1.4.0 - Upgrade
Upgrade
Oracle Fusion Middleware - Oracle Unified Directory (OUD Core)to a version that resolves this vulnerability.Fixed in 14.1.2.1.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60417?
The severity of CVE-2026-60417 is rated as high with a score of 8.1.
How do I fix CVE-2026-60417?
To fix CVE-2026-60417, you should upgrade to the latest supported version of Oracle Unified Directory.
What versions are affected by CVE-2026-60417?
The affected versions by CVE-2026-60417 are 12.2.1.4.0 and 14.1.2.1.0 of Oracle Unified Directory.
Who can exploit CVE-2026-60417?
CVE-2026-60417 can be exploited by an unauthenticated attacker with network access via LDAP.
What impact does CVE-2026-60417 have on Oracle Unified Directory?
CVE-2026-60417 allows an attacker to compromise Oracle Unified Directory, potentially leading to a breach of confidentiality, integrity, and availability.