Oracle Virtual Directory vulnerabilities

4 CVEs affecting Oracle Virtual Directory, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-61231, published 2026-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-3253, published 2018-10-17. High severity, CVSS 8.5. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Manager). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0.…
CVE-2017-10369, published 2017-10-19. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Server). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0.…
CVE-2026-35312, published 2026-06-17. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware (component: Virtual Directory Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily…
CVE-2026-61231, published 2026-08-18. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Virtual Directory product of Oracle Fusion Middleware (component: Virtual Directory Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily…