CVE-2026-60417 in Unified Directory
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via LDAP to compromise Oracle Unified Directory. Successful attacks of this vulnerability can result in takeover of Oracle Unified Directory. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 07/22/2026
The vulnerability under examination affects Oracle Unified Directory, a critical component within Oracle Fusion Middleware that serves as a centralized directory service for identity management and authentication. This directory service plays a fundamental role in enterprise security infrastructures, storing sensitive user credentials, access controls, and organizational data that governs system access and authorization. The affected versions 12.2.1.4.0 and 14.1.2.1.0 represent widely deployed configurations across enterprise environments where directory services form the backbone of authentication mechanisms for applications, databases, and network resources.
The technical flaw manifests as a security weakness within the OUD Core component that allows an unauthenticated attacker to exploit a network-based vulnerability through the Lightweight Directory Access Protocol. This protocol serves as the standard communication interface for directory services, making it a primary target for attackers seeking to compromise identity infrastructure. The CVSS score of 8.1 indicates a high-severity vulnerability with significant impact across confidentiality, integrity, and availability domains, suggesting that successful exploitation could result in complete system compromise. The attack vector requires network access via LDAP, meaning the vulnerability can be exploited from external networks without requiring prior authentication credentials.
The operational impact of this vulnerability extends far beyond simple data theft or service disruption. An attacker who successfully compromises Oracle Unified Directory gains access to a critical enterprise asset that likely contains user accounts, group memberships, access permissions, and potentially sensitive organizational data. This compromise could enable lateral movement throughout the network infrastructure as directory services are often integrated with other systems for authentication and authorization purposes. The vulnerability's classification as difficult to exploit suggests that while sophisticated attackers may be able to leverage it, the attack requires specific conditions or knowledge of particular implementation details.
From a security framework perspective, this vulnerability aligns with CWE-287 (Improper Authentication) and potentially CWE-310 (Cryptographic Issues), as it relates to authentication mechanisms within directory services. The attack pattern follows typical adversary tactics from the MITRE ATT&CK framework, specifically targeting credential access through network service exploitation and privilege escalation by leveraging compromised directory infrastructure. Organizations should implement immediate mitigations including network segmentation, firewall rule restrictions on LDAP ports, and monitoring for unusual authentication patterns or unauthorized access attempts. Additionally, patch management protocols should be prioritized to address this vulnerability in affected Oracle Unified Directory versions, as the attack surface remains significant given the critical role these services play in enterprise security architectures.
The vulnerability's characteristics make it particularly concerning for organizations with extensive directory service deployments, as compromise of Oracle Unified Directory could result in widespread system infiltration and data breaches. The combination of high impact across all security dimensions and network-based accessibility creates a substantial risk profile that requires immediate attention from security teams responsible for protecting enterprise identity infrastructure.