CVE-2026-60419: High severity Oracle Oracle Unified Directory vulnerability
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can result in takeover of Oracle Unified Directory. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60419?
CVE-2026-60419 has a high severity score of 8.8.
How do I fix CVE-2026-60419?
To fix CVE-2026-60419, update Oracle Unified Directory to the recommended patched version.
Who is affected by CVE-2026-60419?
Versions 12.2.1.4.0 and 14.1.2.1.0 of Oracle Unified Directory are affected by CVE-2026-60419.
What type of attack can exploit CVE-2026-60419?
CVE-2026-60419 can be exploited by a low-privileged attacker with network access via LDAP.
What components of Oracle Fusion Middleware are impacted by CVE-2026-60419?
CVE-2026-60419 impacts the OUD Core component of the Oracle Unified Directory product.