FAIL › dossier
internet directory
PRODUCT· dossier confidence 20%
Oracle Internet Directory is a LDAP v3 compliant directory service integrated into Oracle Fusion Middleware. It has a critical security track record of unpatched RCE vulnerabilities allowing low-privileged attackers to take over systems via network access.
PROFILE
CategoryMiddlewareWhat they doOracle Internet Directory is a LDAP v3 compliant directory service with meta-directory capabilities built on the Oracle database, integrated into Oracle Fusion Middleware.
Websitehttps://www.oracle.com/middleware/technologies/internet-directory.html ↗
SECURITY POSTURE
The product has a critical track record of unpatched RCE vulnerabilities in LDAP servers, allowing low-privileged attackers to take over systems via network access.
Notable failures
- CVE-2026-61248 critical RCE in LDAP server
- CVE-2026-61258 critical vulnerability in Oracle Internet Directory
- CVE-2026-61241 critical vulnerability in Oracle Internet Directory
Patterns: repeated critical RCEs in LDAP server components; low-privileged attackers achieving system takeover via network access
FAILURE HISTORY · 3
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-08-18 | CVE-2026-61258 | critical | An unauthenticated LDAP vulnerability in Oracle Internet Directory allows remote takeover of the server. |
| 2026-08-18 | CVE-2026-61241 | critical | An unauthenticated LDAP attacker can take over Oracle Internet Directory in versions 12.2.1.4.0 and 14.1.2.1.0. |
| 2026-08-18 | CVE-2026-61248 | critical | A critical LDAP server vulnerability in Oracle Internet Directory allows low-privileged attackers to take over the system via network access. |
DOSSIER SOURCES
- Oracle Internet Directory - Wikipedia · en.wikipedia.org
- Oracle Internet Directory · www.oracle.com
- Oracle Corporation - Wikipedia · en.wikipedia.org
Open questions: Oracle Internet Directory founding year · Oracle Internet Directory headquarters location · Oracle Internet Directory company size · Oracle Internet Directory ownership structure · Oracle Internet Directory official website
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-03 03:53:54.436152+00:00