# Oracle Unified Directory vulnerabilities Source: https://junglewise.ai/threats/technologies/unified-directory Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/unified-directory.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 32 vulnerabilities in Oracle Unified Directory: 0 in the last 7 days and 7 in the last 90 days, 8 of them critical and 0 exploited in the wild. The most recent, CVE-2026-60969, was published on 18 August 2026. Nothing was published in the last eight weeks. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 7 - All time: 32 (8 critical, 0 exploited in the wild) ## About Oracle Unified Directory A Java-based directory server that provides storage and management of identity data. ## Latest Oracle Unified Directory vulnerabilities - [CVE-2026-60969: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported…](https://junglewise.ai/threats/cve-2026-60969-vulnerability-in-the-oracle-unified-directory-product-of-oracle) (high, CVSS 7.7, published 18 Aug 2026) - [CVE-2026-60914: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported…](https://junglewise.ai/threats/cve-2026-60914-vulnerability-in-the-oracle-unified-directory-product-of-oracle) (high, CVSS 7.5, published 18 Aug 2026) - [CVE-2026-60895: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported…](https://junglewise.ai/threats/cve-2026-60895-vulnerability-in-the-oracle-unified-directory-product-of-oracle) (medium, CVSS 6.8, published 18 Aug 2026) - [CVE-2026-60889: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported…](https://junglewise.ai/threats/cve-2026-60889-vulnerability-in-the-oracle-unified-directory-product-of-oracle) (high, CVSS 7.5, published 18 Aug 2026) - [CVE-2026-60850: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported…](https://junglewise.ai/threats/cve-2026-60850-vulnerability-in-the-oracle-unified-directory-product-of-oracle) (high, CVSS 7.5, published 18 Aug 2026) - [CVE-2026-60849: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported…](https://junglewise.ai/threats/cve-2026-60849-vulnerability-in-the-oracle-unified-directory-product-of-oracle) (high, CVSS 8.5, published 18 Aug 2026) - [CVE-2026-60841: Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core). Supported…](https://junglewise.ai/threats/cve-2026-60841-vulnerability-in-the-oracle-unified-directory-product-of-oracle) (high, CVSS 8.5, published 18 Aug 2026) - [CVE-2026-60520: Oracle Unified Directory data compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60520-oracle-unified-directory-data-compromise-in-oud-core) (high, CVSS 8.1, published 21 Jul 2026) - [CVE-2026-60519: Oracle Unified Directory compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60519-oracle-unified-directory-compromise-in-oud-core) (high, CVSS 7.2, published 21 Jul 2026) - [CVE-2026-60437: Oracle Unified Directory integrity and availability loss in OUD Core](https://junglewise.ai/threats/cve-2026-60437-oracle-unified-directory-integrity-and-availability-loss-in-oud) (high, CVSS 8.7, published 21 Jul 2026) - [CVE-2026-60436: Oracle Unified Directory denial of service in OUD Core](https://junglewise.ai/threats/cve-2026-60436-oracle-unified-directory-denial-of-service-in-oud-core) (high, CVSS 7.5, published 21 Jul 2026) - [CVE-2026-60430: Oracle Unified Directory takeover in OUD Core](https://junglewise.ai/threats/cve-2026-60430-oracle-unified-directory-takeover-in-oud-core) (high, CVSS 8.8, published 21 Jul 2026) - [CVE-2026-60429: Oracle Unified Directory compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60429-oracle-unified-directory-compromise-in-oud-core) (critical, CVSS 9.9, published 21 Jul 2026) - [CVE-2026-60428: Oracle Unified Directory unauthorized data access in OUD Core](https://junglewise.ai/threats/cve-2026-60428-oracle-unified-directory-unauthorized-data-access-in-oud-core) (high, CVSS 8.2, published 21 Jul 2026) - [CVE-2026-60427: Oracle Unified Directory unauthorized data access in OUD Core](https://junglewise.ai/threats/cve-2026-60427-oracle-unified-directory-unauthorized-data-access-in-oud-core) (high, CVSS 8.7, published 21 Jul 2026) - [CVE-2026-60426: Oracle Unified Directory unauthorized data access in OUD Core](https://junglewise.ai/threats/cve-2026-60426-oracle-unified-directory-unauthorized-data-access-in-oud-core) (high, CVSS 8.5, published 21 Jul 2026) - [CVE-2026-60425: Oracle Unified Directory denial of service in OUD Core](https://junglewise.ai/threats/cve-2026-60425-oracle-unified-directory-denial-of-service-in-oud-core) (high, CVSS 7.5, published 21 Jul 2026) - [CVE-2026-60424: Oracle Unified Directory compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60424-oracle-unified-directory-compromise-in-oud-core) (critical, CVSS 9, published 21 Jul 2026) - [CVE-2026-60423: Oracle Unified Directory compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60423-oracle-unified-directory-compromise-in-oud-core) (high, CVSS 8.8, published 21 Jul 2026) - [CVE-2026-60422: Oracle Unified Directory security bypass in OUD Core](https://junglewise.ai/threats/cve-2026-60422-oracle-unified-directory-security-bypass-in-oud-core) (critical, CVSS 9.9, published 21 Jul 2026) - [CVE-2026-60421: Oracle Unified Directory security bypass in OUD Core](https://junglewise.ai/threats/cve-2026-60421-oracle-unified-directory-security-bypass-in-oud-core) (high, CVSS 8.2, published 21 Jul 2026) - [CVE-2026-60420: Oracle Unified Directory unauthorized data access in OUD Core](https://junglewise.ai/threats/cve-2026-60420-oracle-unified-directory-unauthorized-data-access-in-oud-core) (high, CVSS 8.5, published 21 Jul 2026) - [CVE-2026-60419: Oracle Unified Directory compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60419-oracle-unified-directory-compromise-in-oud-core) (high, CVSS 8.8, published 21 Jul 2026) - [CVE-2026-60418: Oracle Unified Directory compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60418-oracle-unified-directory-compromise-in-oud-core) (high, CVSS 7.2, published 21 Jul 2026) - [CVE-2026-60417: Oracle Unified Directory compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60417-oracle-unified-directory-compromise-in-oud-core) (high, CVSS 8.1, published 21 Jul 2026) ## Most severe Oracle Unified Directory vulnerabilities - [CVE-2026-60360: Oracle Unified Directory remote compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60360-oracle-unified-directory-remote-compromise-in-oud-core) (critical, CVSS 10, published 21 Jul 2026) - [CVE-2026-60429: Oracle Unified Directory compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60429-oracle-unified-directory-compromise-in-oud-core) (critical, CVSS 9.9, published 21 Jul 2026) - [CVE-2026-60422: Oracle Unified Directory security bypass in OUD Core](https://junglewise.ai/threats/cve-2026-60422-oracle-unified-directory-security-bypass-in-oud-core) (critical, CVSS 9.9, published 21 Jul 2026) - [CVE-2026-60361: Oracle Unified Directory takeover in OUD Core](https://junglewise.ai/threats/cve-2026-60361-oracle-unified-directory-takeover-in-oud-core) (critical, CVSS 9.9, published 21 Jul 2026) - [CVE-2026-46774: Oracle Unified Directory improper access control in OUD Core](https://junglewise.ai/threats/cve-2026-46774-oracle-unified-directory-improper-access-control-in-oud-core) (critical, CVSS 9.8, published 17 Jun 2026) - [CVE-2026-46773: Oracle Unified Directory improper access control in OUD Core](https://junglewise.ai/threats/cve-2026-46773-oracle-unified-directory-improper-access-control-in-oud-core) (critical, CVSS 9.8, published 17 Jun 2026) - [CVE-2026-60362: Oracle Unified Directory full compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60362-oracle-unified-directory-full-compromise-in-oud-core) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60424: Oracle Unified Directory compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60424-oracle-unified-directory-compromise-in-oud-core) (critical, CVSS 9, published 21 Jul 2026) - [CVE-2026-60430: Oracle Unified Directory takeover in OUD Core](https://junglewise.ai/threats/cve-2026-60430-oracle-unified-directory-takeover-in-oud-core) (high, CVSS 8.8, published 21 Jul 2026) - [CVE-2026-60423: Oracle Unified Directory compromise in OUD Core](https://junglewise.ai/threats/cve-2026-60423-oracle-unified-directory-compromise-in-oud-core) (high, CVSS 8.8, published 21 Jul 2026) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 7 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Oracle technologies - [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server): 163 vulnerabilities - [Oracle Hyperion Financial Management](https://junglewise.ai/threats/technologies/hyperion-financial-management): 142 vulnerabilities - [Oracle Helidon](https://junglewise.ai/threats/technologies/helidon): 130 vulnerabilities - [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster): 129 vulnerabilities - [Oracle Coherence](https://junglewise.ai/threats/technologies/coherence): 113 vulnerabilities - [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite): 110 vulnerabilities - [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content): 110 vulnerabilities - [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search): 104 vulnerabilities - [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager): 102 vulnerabilities - [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools): 101 vulnerabilities - [Oracle PeopleSoft Enterprise PeopleTools](https://junglewise.ai/threats/technologies/peopletools): 101 vulnerabilities - [Oracle Java SE](https://junglewise.ai/threats/technologies/java-se): 92 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oracle Unified Directory vulnerabilities", https://junglewise.ai/threats/technologies/unified-directory, 9 November 2026.