CVE-2019-0227

The CVE-2019-0227 entry concerns an SSRF in Apache Axis 1.4 (last released in 2006). The connected IBM bulletins confirm Axis 1.x vulnerability details and state Axis 2 is the successor, with 1.7.9 (Axis2) being not vulnerable. Affected Axis 1.x components are legacy; remediation is to upgrade to...

CVE-2018-8032

CVE-2018-8032 affects Apache Axis 1.x (up to 1.4) with a cross-site scripting (XSS) vulnerability in the default servlet/services. This vulnerability is documented in IBM/PM security bulletins linked to Axis, confirming an XSS flaw (CWE-79) in Axis 1.x and indicating broader IBM product exposure....

CVE-2026-61241

Oracle OID LDAP Server (versions 12.2.1.4.0, 14.1.2.1.0) has an unauthenticated remote vulnerability exploitable via LDAP, yielding CVSS 10.0 (scope change, full CIA impact) and full takeover. Patch details are not provided in the documents; consult Oracle's August 2026 CPU advisory for remediati...

CVE-2026-83059

Oracle Internet Directory (component: OID LDAP Server ), part of Oracle Fusion Middleware, is affected in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via LDAP can exploit this vulnerability to achieve full takeover of the product (C:H/I:H/A:H). T...

CVE-2018-2601

CVE-2018-2601 affects Oracle Internet Directory (Oracle Fusion Middleware) subcomponent Oracle Directory Services Manager. Identified affected versions: 11.1.1.7.0, 11.1.1.9.0, 12.2.1.3.0. Root cause not detailed in the provided documents, but the vulnerability is exploitable by a high-privilege ...

CVE-2000-0987

CVE-2000-0987 describes a buffer overflow in the Oracle Internet Directory LDAP daemon (oidldapd) shipped with Oracle 8i (Linux, 8.1.6). The vulnerability occurs in oidldapd’s handling of the LDAP “connect” option, allowing a local user to gain the euid of the oidldapd process (typically the orac...

CVE-2001-0974

The CVE-2001-0974 entry concerns Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1, where format string vulnerabilities in the LDAP handling code allow remote attackers to execute arbitrary code as demonstrated by the PROTOS LDAPv3 test suite. The CERT/CC advisory CA-2001-18 documents the...

CVE-2001-0975

The CVE-2001-0975 entry describes buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 that allow remote code execution, demonstrated by the PROTOS LDAPv3 test suite. Supported details show Oracle released Solaris-based patches for these versions (July 2001...

CVE-2001-1321

CVE-2001-1321 affects Oracle Internet Directory Server 2.1.1.x and 3.0.1. The issue permits remote attackers to crash the service and potentially execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite. The root cause is in the...

CVE-2001-0300

The CVE-2001-0300 issue pertains to the Oracle Internet Directory LDAP Daemon (oidldapd) version 2.1.1.1 included with Oracle 8i/8.1.7. The daemon writes logs to a directory (ldaplog) that has world‑writable permissions, enabling a local user to delete logs and, via a symlink attack, overwrite ot...

CVE-2026-83061

Oracle Internet Directory (component: OID LDAP Server ), part of Oracle Fusion Middleware, is affected by an easily exploitable vulnerability in supported versions 12.2.1.4.0 and 14.1.2.1.0 . An unauthenticated attacker with network access via LDAP can exploit this vulnerability with low complexi...

CVE-2026-61248

The OID LDAP Server component of Oracle Internet Directory (versions 12.2.1.4.0 and 14.1.2.1.0) has a critical CVSS 9.9 flaw allowing a low-privileged network attacker via LDAP to compromise the directory and potentially other products (scope change). No root cause, exploit details, or patch vers...

CVE-2026-61258

Affected : Oracle Internet Directory OID LDAP Server component in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0. Cause : unspecified; classified as "easily exploitable." Impact : unauthenticated network attacker via LDAP can fully compromise the directory (C:H/I:H/A:H, CVSS 9.8 Crit...

CVE-2026-83066

CVE-2026-83066 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically supported versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via T3 or IIOP , potentially resulti...

CVE-2026-83054

CVE-2026-83054 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically supported versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via LDAP , allowing full takeover of...

CVE-2026-83060

Oracle Internet Directory (OID LDAP Server) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 is affected by an easily exploitable vulnerability that allows an unauthenticated attacker with network access via LDAP to compromise the service. Successful exploitation can result in full ...

CVE-2026-83062

Oracle Internet Directory (component: OID LDAP Server ) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access via LDAP to fully take over the directory service. The CVSS 3.1 score is ...