EUVD-2026-46826
GHSA-mfcj-77px-whw5
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Access control enforcement
MITRE ATT&CK
1 technique across 1 tactic: Defense Evasion The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 22, 2026
Unauthorized data access in Oracle Unified Directory 12.2.1.4.0 and 14.1.2.1.0 (OUD Core component) lets a remote unauthenticated attacker abuse the LDAP interface to read critical directory data and make limited unauthorized modifications. Rated CVSS 8.2 and flagged by Oracle as easily exploitable, the flaw is tagged as an authentication bypass, meaning directory contents can be reached without valid credentials. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Know when Unified Directory gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Primary rating from Vendor (oracle) · only source for this CVE.
CVSS VectorVendor: oracle
DescriptionCVE.org
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Unified Directory accessible data as well as unauthorized update, insert or delete access to some of Oracle Unified Directory accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N).
Executive ViewAI
Oracle Unified Directory (OUD) versions 12.2.1.4.0 and 14.1.2.1.0 contain a critical authentication bypass (CVSS 8.2) that allows unauthenticated remote attackers to read sensitive directory data, including user credentials and system configurations. Organizations relying on OUD for identity and access management face immediate risk of credential compromise and lateral movement. Without a vendor patch currently available, compensating controls must be deployed urgently to prevent exploitation.
Within 24 hours: inventory all systems running Oracle Unified Directory 12.2.1.4.0 or 14.1.2.1.0 and document their network exposure; restrict LDAP ports (389/TCP and 636/TCP) to authorized internal systems only via firewall rules; enable LDAP audit logging at maximum verbosity. Within 7 days: implement network segmentation to isolate OUD instances from untrusted networks and the internet; analyze LDAP query logs for suspicious patterns or unauthorized access; assess whether unauthorized directory access has already occurred. Within 30 days: establish a relationship with Oracle support to track patch availability timelines; evaluate and test upgrade paths to patched OUD versions; deploy an LDAP proxy or gateway requiring additional authentication validation before reaching the directory; implement directory-level access controls restricting sensitive attributes to authenticated principals.
No vendor-released patch identified at time of analysis. Interim mitigations: enforce network-layer LDAP access restrictions via firewall rules permitting only known authorized systems; disable remote LDAP access if operationally feasible; implement strict network segmentation; enable detailed LDAP audit logging for detection of unauthorized queries; deploy an LDAP proxy or intermediary gateway enforcing re-authentication before requests reach the directory; implement attribute-level access controls within OUD if available; continuously monitor for suspicious access patterns; configure alerts on failed LDAP bind attempts.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
More in Unified Directory
View allComplete takeover of Oracle Unified Directory (OUD) is possible when an unauthenticated remote attacker sends crafted tr
Privilege escalation to full takeover in Oracle Unified Directory (OUD Core) 12.2.1.4.0 and 14.1.2.1.0 lets a low-privil
Full takeover of Oracle Unified Directory is possible in the OUD Core component of Oracle Fusion Middleware versions 12.
Privilege escalation and data compromise in Oracle Unified Directory 14.1.2.1.0 (OUD Core) lets a low-privileged, authen
Complete takeover of Oracle Unified Directory (OUD Core) is achievable by an unauthenticated, network-based attacker com
Full compromise of Oracle Unified Directory is possible in the OUD Core component of Oracle Fusion Middleware versions 1
Full compromise of Oracle Unified Directory (OUD Core component of Oracle Fusion Middleware) is possible when a low-priv
Full compromise of Oracle Unified Directory (OUD Core) is possible when a low-privileged attacker with network access se
Takeover of Oracle Unified Directory is possible in the OUD Core component of Oracle Fusion Middleware versions 12.2.1.4
Data tampering and denial-of-service in Oracle Unified Directory (OUD Core component) let a high-privileged, network-adj
Scope-changing compromise of Oracle Unified Directory (OUD Core) 12.2.1.4.0 and 14.1.2.1.0 lets a remote, unauthenticate
Unauthorized data access in Oracle Unified Directory (OUD Core) 12.2.1.4.0 and 14.1.2.1.0 lets a remote unauthenticated
Exploit-DB