EUVD-2026-61341
GHSA-wxxh-q78p-p5j5
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Unauthenticated LDAP-reachable, low-complexity full takeover of an identity service whose compromise crosses into dependent products, giving PR:N, AC:L, S:C and C/I/A:H.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
2DescriptionCVE.org
Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory. While the vulnerability is in Oracle Internet Directory, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
AnalysisAI
Complete takeover of Oracle Internet Directory (OID) is possible in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 through its OID LDAP Server component, where an unauthenticated remote attacker with LDAP network access can fully compromise the directory service. Rated CVSS 10.0 with a scope change (S:C), successful exploitation can pivot beyond OID to significantly impact additional products that depend on it. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions - remote unauthenticated exploitation against default configurations of Oracle Internet Directory, requiring only network access to the OID LDAP Server (LDAP/LDAPS) listener; the CVSS vector AV:N/AC:L/PR:N/UI:N confirms no authentication, no user interaction, and low complexity. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Every exploitation signal in the CVSS vector points to maximum, real-world priority: AV:N (network/LDAP-reachable), AC:L (low complexity, 'easily exploitable' per Oracle), PR:N (no authentication), UI:N (no user interaction), and S:C with C:H/I:H/A:H yielding the ceiling score of 10.0. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fixes delivered in Oracle's August 2026 Critical Patch Update (Patch available per vendor advisory) - see https://www.oracle.com/security-alerts/cspuaug2026.html - for Oracle Internet Directory 12.2.1.4.0 and 14.1.2.1.0; Oracle does not publish a separate semantic fix version, so the CPU patch bundle is the released fix and no independent fix-version string is confirmed here. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Oracle Fusion Middleware OID deployments, confirm affected versions (12.2.1.4.0 and 14.1.2.1.0), and map LDAP network accessibility from external and internal untrusted networks. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Internet Directory
View allA Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2
Privilege escalation to full takeover in Oracle Internet Directory (OID) 12.2.1.4.0 and 14.1.2.1.0 allows a low-privileg
Full compromise of Oracle Internet Directory (OID) LDAP Server is possible in Oracle Fusion Middleware versions 12.2.1.4
Vulnerability in the Oracle Internet Directory component of Oracle Fusion Middleware (subcomponent: Oracle Directory Ser
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/serv
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today