Oracle Unified Directory vulnerabilities

CVE-2026-60850 [HIGH] CWE-284 CVE-2026-60850: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can r

CVE-2026-60914 [HIGH] CWE-284 CVE-2026-60914: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can r

CVE-2026-60889 [HIGH] CWE-284 CVE-2026-60889: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can r

CVE-2026-60421 [HIGH] CWE-284 CVE-2026-60421: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified Directory. While the vulnerability is in Oracle Unified

CVE-2026-60969 [HIGH] CWE-200 CVE-2026-60969: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified Directory. While the vulnerability is in Oracle Unified Di

CVE-2026-60437 [HIGH] CWE-284 CVE-2026-60437: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via LDAP to compromise Oracle Unified Directory. While the vulnerability is in Oracle Unified D

CVE-2026-60418 [HIGH] CWE-269 CVE-2026-60418: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can r

CVE-2026-60519 [HIGH] CWE-284 CVE-2026-60519: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can r

CVE-2026-60425 [HIGH] CWE-400 CVE-2026-60425: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can r

CVE-2026-60436 [HIGH] CWE-400 CVE-2026-60436: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can r

CVE-2026-60895 [MEDIUM] CWE-284 CVE-2026-60895: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Co Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability ca

CVE-2020-14565 [HIGH] CVE-2020-14565: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: Securi Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Unified Directory. Successful attacks require human interacti

CVE-2019-10247 [MEDIUM] CWE-213 CVE-2019-10247: In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the ser In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on je

CVE-2019-10246 [MEDIUM] CWE-213 CVE-2019-10246: In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource dire