CoreCVE
Back

CRITICAL

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server)

Published Sep 15, 2026

Description

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Internet Directory. Successful attacks of this vulnerability can result in takeover of Oracle Internet Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-287

Improper Authentication

CWE-306

Missing Authentication

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner oracle
Published Sep 15, 2026
Updated Sep 15, 2026
Reserved Aug 31, 2026
Link CVE-2026-83054

CISA Vulnrichment

Updated Sep 15, 2026

NVD

Status Awaiting Analysis
Modified Sep 16, 2026
Link CVE-2026-83054

Red Hat

No data

ENISA EUVD

Assigner oracle
Published Sep 15, 2026
Updated Sep 15, 2026
Link EUVD-2026-79382

GitHub

No data