CVE-2026-60425: High severity Oracle Oracle Unified Directory vulnerability
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Unified Directory. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60425?
The severity of CVE-2026-60425 is classified as high with a score of 7.5 according to the CVSS.
How do I fix CVE-2026-60425?
To fix CVE-2026-60425, you should upgrade to the latest supported versions of Oracle Unified Directory, specifically versions 12.2.1.4.0 and 14.1.2.1.0.
What impact does CVE-2026-60425 have on Oracle Unified Directory?
CVE-2026-60425 allows an unauthenticated attacker with network access via LDAP to compromise the Oracle Unified Directory.
Which versions of Oracle Unified Directory are affected by CVE-2026-60425?
The affected versions of Oracle Unified Directory include 12.2.1.4.0 and 14.1.2.1.0.
Is authentication required to exploit CVE-2026-60425?
No, CVE-2026-60425 can be exploited by an unauthenticated attacker.