CVE-2019-10247

CVE-2019-10247 affects Eclipse Jetty when configured to list contexts in 404 responses. Jetty versions 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older disclose the fully qualified directory base resource location in the HTML output of a not-found Context, via the DefaultHandler...

CVE-2019-10246

CVE-2019-10246 is described in connected IBM security bulletins as an Eclipse Jetty vulnerability where a server configured to Listing directory contents could expose the fully-qualified Base Resource directory name to remote clients, potentially revealing sensitive information. IBM Cognos Analyt...

CVE-2020-14565

CVE-2020-14565 affects Oracle Unified Directory within Oracle Fusion Middleware Security component. Exploitation requires network access via HTTP with user interaction; vulnerable versions include 11.1.2.3.0, 12.2.1.3.0, and 12.2.1.4.0. Impact per sources: potential unauthorized data access/modif...

CVE-2026-46773

Technical details about CVE-2026-46773 are not publicly available in the provided documents. Monitor for updates from Oracle/CVE feeds; no affected products, impact, or remediation are specified here.

CVE-2026-46774

Technical details for CVE-2026-46774 are not publicly available in the provided documents. Monitor for updates from Oracle and the CVE feed.

CVE-2026-46776

CVE-2026-46776 score and access profile are provided: CVSS v3.1 base score 8.6 (HIGH) with NETWORK attack vector, LOW attack complexity, NO privileges required, NO user interaction, and UNCHANGED scope. Impact: Confidentiality LOW, Integrity HIGH, Availability LOW. No concrete affected products/v...

CVE-2026-60429

CVE-2026-60429 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged attacker with LDAP network access to compromise OUD, with potential impact on connected products and complete takeover...

CVE-2026-60361

Technical details for CVE-2026-60361 are not publicly provided in the connected documents. Monitor for updates; the initial description lists affected Oracle OUD versions and CVSS, but no exploit specifics, impact details beyond high-level risk, or remediation.

CVE-2026-60422

CVE-2026-60422 affects Oracle Fusion Middleware’s Oracle Unified Directory (OUD Core). The vulnerable product is Oracle Unified Directory 14.1.2.1.0. The vulnerability allows a low-privilege attacker who can access OUD via LDAP over the network to compromise the directory, with potential unauthor...

CVE-2026-60849

Oracle Unified Directory (OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0 have a HIGH-severity (CVSS 8.5) LDAP network vulnerability exploitable by low-privileged attackers, enabling full product takeover with scope change; Oracle's August 2026 CPU advisory is the primary remediation source.

CVE-2026-60424

CVE-2026-60424 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable by an unauthenticated attacker over a network via LDAP to compromise OUD, potentially resulting in takeover. The CVSS score...

CVE-2026-60427

CVE-2026-60427 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware, impacting versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability can be exploited by an unauthenticated attacker over the network via LDAP to compromise data integrity and confidentiality, with scope change pot...

CVE-2026-60437

CVE-2026-60437 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected support versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability enables a high-privilege attacker with network access via LDAP to compromise Oracle Unified Directory, potentially causing unautho...

CVE-2026-60421

CVE-2026-60421 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged attacker with network access via LDAP to compromise OUD, potentially leading to unauthorized creation, deletion or modification of...

CVE-2026-60520

CVE-2026-60520 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability can be exploited by a low-privileged attacker with network access via LDAP to compromise data, enabling unauthorized creation, deletion, o...

CVE-2026-60362

The CVE-2026-60362 entry describes a vulnerability in Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The issue allows unauthenticated LDAP-access from network space to compromise OUD, with potential takeover and a CVSS v3.1 ba...

CVE-2026-60426

Summary: CVE-2026-60426 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability allows a low-privileged attacker with network access via LDAP to compromise OUD, with potential impact including unauthorized access...

CVE-2026-60436

CVE-2026-60436 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware, with vulnerable versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible LDAP attackers to cause the OUD service to hang or crash (complete DOS). CVSS v3.1 base score 7....

CVE-2026-60969

Oracle Unified Directory (component: OUD Core ) in versions 12.2.1.4.0 and 14.1.2.1.0 contains an easily exploitable vulnerability that allows a low-privileged attacker with network access via LDAP to gain unauthorized access to critical data or complete access to all OUD-accessible data. The vul...

CVE-2026-60418

CVE-2026-60418 concerns Oracle Fusion Middleware’s Oracle Unified Directory (OUD Core). Affected are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability can be exploited by a high-privilege attacker with network access via LDAP to compromise OUD, potentially resulting in takeover of Oracle Unified Direc...

CVE-2026-60428

CVE-2026-60428 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware, with affected versions 12.2.1.4.0 and 14.1.2.1.0. It is described as unauthenticated, LDAP-accessible, allowing compromise of OUD and potentially unauthorized read, update, insert, or delete of accessible ...

CVE-2026-60419

CVE-2026-60419 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a low-privileged, network-accessible attacker via LDAP to compromise OUD, potentially taking over the directory service. CVSS 3.1 b...

CVE-2026-60425

CVE-2026-60425 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware; affected versions are 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated LDAP-facing flaw can cause a hang or frequent crash (DoS). CVSS 3.1 base score 7.5 (Availability). Exploitation details are not provided beyo...

CVE-2026-60895

A vulnerability in Oracle Unified Directory's OUD Core component affects versions 12.2.1.4.0 and 14.1.2.1.0. A low-privileged network attacker exploiting via LDAP can gain unauthorized creation, deletion, or modification access to critical data. CVSS 3.1 score is 6.8 (Medium), with high confident...

CVE-2026-60359

CVE-2026-60359 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise OUD, potentially leading to unauthorized access to all Oracle Unified Di...

CVE-2026-60417

The CVE-2026-60417 entry concerns Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected are Oracle OUD versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable remotely over LDAP by an unauthenticated attacker, with the impact described as takeover of Oracle Unifie...

CVE-2026-60420

Technical details about CVE-2026-60420 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-60423

Affected product: Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0 and 14.1.2.1.0. Impact: Low-privilege attacker with network access via LDAP can compromise OUD and potentially take over the directory. Severity: CVSS v3.1 base score 8.8 (HIGH) ...

CVE-2026-60430

CVE-2026-60430 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affects versions 12.2.1.4.0 and 14.1.2.1.0 are vulnerable to a network-accessible LDAP flaw that a low-privileged attacker can exploit to take over OUD. The CVSS 3.1 base score is 8.8 (HIGH) with impacts to co...

CVE-2026-60519

CVE-2026-60519 affects Oracle Unified Directory (OUD Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows a high-privileged attacker with network access via LDAP to take over Oracle Unified Directory, with CVSS 3.1 base score 7.2 (Impact...

CVE-2026-60841

Oracle Unified Directory OUD Core (versions 12.2.1.4.0 and 14.1.2.1.0) has a HIGH severity (CVSS 8.5) vulnerability exploitable via LDAP by a low-privileged network attacker, potentially leading to full product takeover with scope change. Oracle released patches in its August 2026 CPU; no public ...

CVE-2026-60914

CVE-2026-60914 affects Oracle Unified Directory (OUD Core) versions 12.2.1.4.0 and 14.1.2.1.0. An unauthenticated attacker with network access via LDAP can compromise confidentiality, gaining access to all OUD data. CVSS 3.1 base score 7.5 (HIGH). Oracle's August 2026 CPU advisory is the primary ...

CVE-2026-60360

CVE-2026-60360 affects Oracle Unified Directory (OUD Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-accessible attackers via LDAP to compromise OUD, with potential takeover and impact on related products. CVSS ...

CVE-2026-60889

An unauthenticated, network-accessible attacker can exploit the OUD Core component via LDAP in Oracle Unified Directory 12.2.1.4.0 and 14.1.2.1.0, gaining unauthorized access to all accessible directory data (CVSS 7.5, HIGH). Oracle's August 2026 Critical Patch Update addresses this; no in-the-wi...

CVE-2026-60850

The Oracle Unified Directory OUD Core component (versions 12.2.1.4.0 and 14.1.2.1.0) is vulnerable to an unauthenticated LDAP-based confidentiality flaw (CVSS 7.5 HIGH), allowing attackers to access all accessible directory data. Oracle's August 2026 CPU advisory is the remediation reference. No ...