CVE-2026-35302

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware WebLogic Server versions 12.2.1.4.0 Oracle Fusion Middleware WebLogic Server versions 14.1.1.0.0

Description An issue exists in the Console component of the WebLogic Server. This flaw allows an unauthenticated attacker with network access via HTTP to compromise the server, potentially leading to a full takeover. Exploitation is difficult and requires human interaction from a person other than the attacker. While the issue resides in WebLogic Server, successful attacks may significantly impact additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.