Unified Directory CVE-2026-60421

Oracle Unified Directory (OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0 contain a privilege-escalation vulnerability that allows authenticated LDAP users to read and modify directory data beyond their authorization scope, with potential to compromise integrated applications that depend on OUD for identity services. The vulnerability poses a significant risk to organizations' identity infrastructure and the security of downstream systems relying on directory data. No public exploit has been identified at time of analysis, but organizations should assume the vulnerability is discoverable and treat affected systems as compromised.

Within 24 hours, conduct an immediate inventory of all Oracle Unified Directory (OUD Core) instances running versions 12.2.1.4.0 or 14.1.2.1.0 and document all applications and systems that depend on these instances for authentication or authorization services. Restrict network access to affected OUD systems to only critical service accounts and applications through firewall and network segmentation if necessary. Within 7 days, enable comprehensive audit logging on all affected OUD instances to capture all directory read and modification operations, deploy monitoring to detect privilege escalation attempts, and baseline expected LDAP access patterns to identify anomalies. Implement principle of least privilege on all LDAP service accounts, reducing directory permissions to minimum necessary scopes. Within 30 days, contact Oracle to determine patch availability and timelines for versions 12.2.1.4.0 and 14.1.2.1.0, conduct a full audit of directory data to identify unauthorized modifications, and develop a migration plan to upgrade or replace affected OUD instances with patched versions, prioritizing systems with access to sensitive identity data.

Implement network segmentation to restrict LDAP access to affected OUD systems to only approved service accounts and applications; enforce principle of least privilege on all LDAP service accounts by restricting directory permissions to minimum required scopes; enable detailed audit logging of all directory operations including reads, writes, and authentication attempts; deploy real-time monitoring and alerting on OUD systems to detect unauthorized privilege escalation or bulk data access patterns; conduct regular directory integrity audits (weekly minimum) to identify unauthorized modifications; consider temporary isolation of non-critical OUD instances from production network access during remediation.