Virtual Directory
Monthly
Full takeover of Oracle Virtual Directory (versions 12.2.1.4.0 and 14.1.2.0.0) is achievable by low-privileged network attackers via the LDAP protocol with no user interaction required. Oracle classifies this as 'easily exploitable,' and the CVSS 3.1 score of 8.8 reflects complete confidentiality, integrity, and availability compromise of the Virtual Directory Server. No public exploit code has been identified at time of analysis, and the vulnerability is not currently listed in the CISA KEV catalog, though the combination of network accessibility, low attack complexity, and low privilege requirement makes this a credible priority for Oracle Fusion Middleware environments.
Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Manager). Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable.
Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Server). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.
Full takeover of Oracle Virtual Directory (versions 12.2.1.4.0 and 14.1.2.0.0) is achievable by low-privileged network attackers via the LDAP protocol with no user interaction required. Oracle classifies this as 'easily exploitable,' and the CVSS 3.1 score of 8.8 reflects complete confidentiality, integrity, and availability compromise of the Virtual Directory Server. No public exploit code has been identified at time of analysis, and the vulnerability is not currently listed in the CISA KEV catalog, though the combination of network accessibility, low attack complexity, and low privilege requirement makes this a credible priority for Oracle Fusion Middleware environments.
Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Manager). Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable.
Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Server). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.