CVE-2026-60426
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via LDAP to compromise Oracle Unified Directory. While the vulnerability is in Oracle Unified Directory, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Unified Directory accessible data as well as unauthorized update, insert or delete access to some of Oracle Unified Directory accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N).
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within Oracle Unified Directory's OUD Core component and affects specifically versions 12.2.1.4.0 and 14.1.2.1.0 of the Oracle Fusion Middleware suite. The flaw represents a critical security weakness that can be exploited by low-privileged attackers who have network access through the Lightweight Directory Access Protocol interface. The vulnerability's ease of exploitation makes it particularly dangerous as it requires minimal privileges and provides attackers with significant access capabilities to the target system.
The technical nature of this vulnerability stems from insufficient authentication and authorization controls within the LDAP protocol implementation, allowing attackers to bypass normal security restrictions. This weakness enables unauthorized access to critical directory data and provides the capability for data modification operations including updates, inserts, and deletions. The vulnerability's classification under CWE-287 (Improper Authentication) and its alignment with ATT&CK technique T1078 (Valid Accounts) demonstrates how attackers can leverage weak authentication mechanisms to gain elevated privileges within directory services.
The operational impact of this vulnerability extends beyond the immediate Oracle Unified Directory system, creating a scope change that can affect additional Oracle products within the same ecosystem. This cascading effect occurs because many Oracle applications and services depend on unified directory services for authentication and authorization functions. Successful exploitation could result in complete compromise of directory data integrity and confidentiality, potentially leading to widespread access violations across interconnected Oracle systems that rely on the compromised directory service.
The CVSS 3.1 base score of 8.5 indicates a high-severity vulnerability with significant impact potential. The vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N reveals that network-based attacks require low complexity, only low privilege levels, and can cause catastrophic confidentiality impacts while maintaining moderate integrity impacts. This scoring reflects the vulnerability's ability to provide attackers with complete access to sensitive directory information while also enabling data modification capabilities. Organizations should implement immediate mitigations including network segmentation, enhanced LDAP protocol monitoring, and privileged account protection measures to reduce exposure risk.
Mitigation strategies should focus on implementing robust authentication controls, regular security patching, and comprehensive monitoring of LDAP traffic patterns. Network firewalls should restrict unnecessary LDAP access, while privileged account management procedures must be strengthened to prevent unauthorized use of administrative credentials. The vulnerability's characteristics align with ATT&CK tactic TA0006 (Credential Access) and technique T1550.002 (Use Alternate Authentication Material), emphasizing the need for multi-factor authentication implementation and regular credential audits. Organizations should also conduct thorough vulnerability assessments to identify other potential entry points within their Oracle Fusion Middleware environments that could be exploited in conjunction with this vulnerability.