CVE-2026-60423: High severity Oracle Oracle Unified Directory vulnerability
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can result in takeover of Oracle Unified Directory. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60423?
The severity of CVE-2026-60423 is rated high with a score of 8.8.
How do I fix CVE-2026-60423?
To fix CVE-2026-60423, update to a non-vulnerable version of Oracle Unified Directory that is above 14.1.2.1.0.
What systems are affected by CVE-2026-60423?
CVE-2026-60423 affects Oracle Unified Directory versions 12.2.1.4.0 and 14.1.2.1.0.
What kind of attacks can exploit CVE-2026-60423?
CVE-2026-60423 can be exploited by a low privileged attacker with network access via LDAP.
Is CVE-2026-60423 easily exploitable?
Yes, CVE-2026-60423 is considered easily exploitable.