Internet Directory (Oracle) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2026-09-15. Vendor: Oracle.

CVEs of Internet Directory

CVE-2026-83066 - CVSS 9.8 (critical), 2026-09-15: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-83062 - CVSS 9.8 (critical), 2026-09-15: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-83063 - CVSS 7.2 (high), 2026-09-15: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-83059 - CVSS 10 (critical), 2026-09-15: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-83061 - CVSS 9.8 (critical), 2026-09-15: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-83060 - CVSS 9.8 (critical), 2026-09-15: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-83056 - CVSS 9.9 (critical), 2026-09-15: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-83058 - CVSS 9.9 (critical), 2026-09-15: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-83057 - CVSS 9.9 (critical), 2026-09-15: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-83055 - CVSS 9.9 (critical), 2026-09-15: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-83054 - CVSS 9.8 (critical), 2026-09-15: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-61258 - CVSS 9.8 (critical), 2026-08-18: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-61248 - CVSS 9.9 (critical), 2026-08-18: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2026-61241 - CVSS 10 (critical), 2026-08-18: Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Supported versions that are affected are…
CVE-2019-0227 - CVSS 7.5 (high), 2019-05-01: A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits…
CVE-2018-8032 - CVSS 6.1 (medium), 2018-08-02: Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
CVE-2018-2601 - CVSS 8 (high), 2018-01-18: Vulnerability in the Oracle Internet Directory component of Oracle Fusion Middleware (subcomponent: Oracle Directory Services Manager). Supported versions…
CVE-2001-0974 - CVSS 7.5 (high), 2001-07-17: Format string vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated…
CVE-2001-1321 - CVSS 7.5 (high), 2001-07-16: Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via…
CVE-2001-0975 - CVSS 7.5 (high), 2001-07-16: Buffer overflow vulnerabilities in Oracle Internet Directory Server (LDAP) 2.1.1.x and 3.0.1 allow remote attackers to execute arbitrary code, as demonstrated…
CVE-2001-0300 - CVSS 2.1 (low), 2001-06-02: oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory (ldaplog) that has world-writable permissions, which may allow local users to delete logs…
CVE-2000-0987 - CVSS 4.6 (medium), 2000-12-19: Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.