CVE-2026-60199

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0

Description A flaw in the Core component of Oracle Fusion Middleware relates to deficiencies in the authentication procedure. This allows an unauthenticated remote attacker with network access via HTTP to compromise the server, potentially resulting in a full takeover of the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.