← Back

CVE-2026-46773

nvd nist
Published: Jun 17, 2026Modified: Jun 19, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: secalert_us@oracle.com (Secondary)

Description

Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can result in takeover of Oracle Unified Directory. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected (2)

Oracle
1 product
Unified Directory
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Unified Directory
Version 12.2.1.4.0
Unified Directory
Version 14.1.2.1.0

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (1)

Source: secalert_us@oracle.com
Vendor Advisory

Timeline

No history available yet.