CVE-2026-91502

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise...

CVE-2026-91323

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-87346

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network...

CVE-2026-87302

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-87300

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows...

CVE-2026-83399

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

CVE-2026-83379

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware component: WebLogic Server Proxy Plug-In for Third-Party Web Servers. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows...

CVE-2026-101515

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network acces...

CVE-2026-91502

The Oracle WebLogic Server (component: Core ) is affected by a vulnerability in versions 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . An unauthenticated attacker with network access via TLS can exploit this issue to compromise the server. Successful exploitation can lead to unauthorize...

CVE-2026-91323

A vulnerability exists in the Core component of the Oracle WebLogic Server product within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to c...

CVE-2026-87346

The Oracle HTTP Server product within Oracle Fusion Middleware (specifically the Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server component) is vulnerable in versions 12.2.1.4.0 and 14.1.2.0.0 . A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access...

CVE-2026-87300

A vulnerability exists in the Oracle Weblogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers) within Oracle Fusion Middleware. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , and 14.1.2.0.0 . This difficult-to-exploit flaw allows an unauthenticated ...

CVE-2026-87302

A critical vulnerability in the Oracle WebLogic Server product (component: Core ) allows an unauthenticated attacker with network access via HTTP to compromise the server. Affected versions include 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . Successful exploitation can lead to unautho...

CVE-2026-83399

The Oracle WebLogic Server product (component: Core ) within Oracle Fusion Middleware is vulnerable in versions 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . An unauthenticated attacker with network access via T3 or IIOP can exploit this vulnerability to compromise the server. A success...

CVE-2026-83379

The Oracle Weblogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers) is affected by a vulnerability in supported versions 12.2.1.4.0 , 14.1.1.0.0 , and 14.1.2.0.0 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network a...

CVE-2026-101515

The Oracle WebLogic Server product (component: Centralized Thirdparty Jars ) of Oracle Fusion Middleware is affected by a vulnerability in versions 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via...

Oracle-WLS-Weblogic-RCE

Oracle-WLS-Weblogic-RCE CVE-2019-2725 Oracle WLSWeblogic RCE test sciript CVE-2019-2725 is a deserialization vulnerability in Oracle WebLogic Server. This remote code execution vulnerability is remotely exploitable without authentication. This script which check the presence or absence of a page ...

patch-CVE-2026-22024

Patch: CVE-2026-22024 Vulnerability Details CVE : CVE-2026-22024 Product : Oracle WebLogic Server Description : Deserialization vulnerability Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-07-01 Status| deployed Deployed To| Production Validated By| SecOps Team...

PT-2026-119200

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Centralized Thirdparty Jars. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network acces...

Oracle WebLogic: CVE-2026-87302 : Critical Patch Update

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...