oracle unified directory

Name: oracle unified directory
Brand: oracle

productUS

cpe:2.3:a:oracle:unified_directory:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical2high2medium0low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-10247US	medium5.3	5.94% (93rd)	—	no fix	2019-04-22	2 versions
CVE-2019-10246US	medium5.3	4.09% (91st)	—	no fix	2019-04-22	2 versions
CVE-2020-14565US	high8.1	1.02% (63rd)	—	no fix	2020-07-15	3 versions
CVE-2026-46774US	—	0.52% (44th)	—	no fix	2026-06-17	2 versions
CVE-2026-46773US	—	0.52% (44th)	—	no fix	2026-06-17	2 versions
CVE-2026-60362US	—OT elevated	0.51% (43rd)	—	no fix	2026-07-21	2 versions
CVE-2026-60360US	—OT elevated	0.51% (43rd)	—	no fix	2026-07-21	2 versions
CVE-2026-60519US	—	0.49% (42nd)	—	no fix	2026-07-21	2 versions
CVE-2026-60418US	—	0.49% (42nd)	—	no fix	2026-07-21	2 versions
CVE-2026-60436US	—	0.47% (41st)	—	no fix	2026-07-21	2 versions
CVE-2026-60425US	—	0.47% (41st)	—	no fix	2026-07-21	2 versions
CVE-2026-60430US	—	0.43% (37th)	—	no fix	2026-07-21	2 versions
CVE-2026-60429US	—	0.43% (37th)	—	no fix	2026-07-21	2 versions
CVE-2026-60423US	—	0.43% (37th)	—	no fix	2026-07-21	2 versions
CVE-2026-60419US	—	0.43% (37th)	—	no fix	2026-07-21	2 versions
CVE-2026-60361US	—OT elevated	0.43% (37th)	—	no fix	2026-07-21	2 versions
CVE-2026-60437US	—	0.43% (37th)	—	no fix	2026-07-21	2 versions
CVE-2026-60914US	—	0.41% (36th)	—	no fix	2026-08-18	2 versions
CVE-2026-60889US	—	0.41% (36th)	—	no fix	2026-08-18	2 versions
CVE-2026-60850US	—	0.41% (36th)	—	no fix	2026-08-18	2 versions
CVE-2026-60359US	—OT elevated	0.41% (36th)	—	no fix	2026-07-21	2 versions
CVE-2026-60424US	—OT elevated	0.39% (33rd)	—	no fix	2026-07-21	2 versions
CVE-2026-60417US	—OT elevated	0.39% (33rd)	—	no fix	2026-07-21	2 versions
CVE-2026-60422US	—	0.39% (33rd)	—	no fix	2026-07-21	= 14.1.2.1.0
CVE-2026-46776US	—	0.37% (31st)	—	no fix	2026-06-17	2 versions
CVE-2026-60520US	—	0.36% (30th)	—	no fix	2026-07-21	2 versions
CVE-2026-60428US	—	0.35% (29th)	—	no fix	2026-07-21	2 versions
CVE-2026-60969US	—	0.35% (29th)	—	no fix	2026-08-18	2 versions
CVE-2026-60427US	—	0.34% (27th)	—	no fix	2026-07-21	2 versions
CVE-2026-60849US	high8.5	0.33% (27th)	—	no fix	2026-08-18	2 versions
CVE-2026-60841US	—	0.33% (27th)	—	no fix	2026-08-18	2 versions
CVE-2026-60426US	—	0.30% (23rd)	—	no fix	2026-07-21	2 versions
CVE-2026-60420US	—	0.30% (23rd)	—	no fix	2026-07-21	2 versions
CVE-2026-60895US	—	0.29% (21st)	—	no fix	2026-08-18	2 versions
CVE-2026-60421US	—	0.29% (21st)	—	no fix	2026-07-21	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control21 CVEs
CWE-306Missing Authentication for Critical Function6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-213Exposure of Sensitive Information Due to Incompatible Policies2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-287Improper Authentication1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan