CVE-2026-21962

🔥 CVE-2026-21962 — Oracle HTTP Server 탐지 툴킷 CVE-2026-21962 의 영향을 받는 Oracle HTTP Server 및 WebLogic Proxy Plug-in 인스턴스를 식별하기 위한 안전하고 비악용적인 탐지 도구입니다. 🧠 취약점 개요 CVE: CVE-2026-21962 심각도: 치명적Critical 공격 벡터: 네트워크Network 인증 필요: 없음None 이 취약점으로 인해 원격의 인증되지 않은 공격자가 기밀성과 무결성을 손상시킬 수 있으며, 잠재적으로 전체 시스템을 장악할 수...

CVE-2026-21962-o

CVE-2026-21962 제 첫 CVSS 10.0 CVE입니다! 👍✅💯㊗️🀄️🈵 요약 쉽게 악용 가능한 취약점으로, HTTP를 통한 네트워크 접근이 가능한 인증되지 않은 공격자가 Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in을 손상시킬 수 있습니다. 중요: 원발견자의 메시지 인터넷 세계에 미칠 잠재적 피해를 고려하여, PoC는 나중에 공개하겠습니다...

Ashwesker-CVE-2026-21962

😈 CVE-2026-21962 — 치명적인 보안 취약점 😈 🚨 심각도 CVSS 점수: 10.0 / 10 치명적 공개일: 2026년 1월 20일 위험 수준: 🔥 최대 — 즉각적인 조치 권장 🧠 이 취약점이란? 다음에 영향을 주는 치명적인 취약점 : Oracle HTTP Server Oracle WebLogic Server 프록시 플러그인 Apache 및 IIS용 이 결함으로 인해 인증되지 않은 원격 공격자 가 로그인 자격 증명 없이 HTTP 를 통해 영향을 받는 서버를 손상시킬 수 있습니다. 🎯...

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and...

Oracle HTTP Server (July 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party W...

Oracle HTTP Server (July 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party W...

EUVD-2026-46892

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: modhttp2.so. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to compromis...

EUVD-2026-46849

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to...

EUVD-2026-46835

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: modssl. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server...

EUVD-2026-46829

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: modproxy. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Whil...

EUVD-2026-46777

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Apache Plugin. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server...

CVE-2026-60530

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: modhttp2.so. The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle HTTP Server executes to compromis...

CVE-2026-60438

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: modssl. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server...

CVE-2026-60431

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: modproxy. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Whil...

CVE-2026-60363

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Apache Plugin. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server...

PT-2026-62572

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server version 14.1.2.0.0 Description A flaw exists in the mod http2.so component of the Oracle HTTP Server within Oracle Fusion Middleware. A low-privileged attacker with access to the infrastructure where the server executes can...

PT-2026-62529

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server versions 12.2.1.4.0 Oracle HTTP Server versions 14.1.2.0.0 Description A flaw in the Core component of Oracle Fusion Middleware allows a low privileged attacker with access to the infrastructure where the server executes to...

CVE-2026-34291

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. While...

Oracle HTTP Server (April 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2026 CPU advisory. - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and...

Oracle HTTP Server (April 2026 CPU)

The versions of HTTP Server installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2026 CPU advisory. - Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and...