PT-2026-62282 · Oracle · Oracle Weblogic Server

CVE-2026-60200

·

Published

2026-07-21

·

Updated

2026-07-28

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Oracle WebLogic Server version 14.1.2.0.0 Oracle WebLogic Server version 15.1.1.0.0
Description An authentication flaw in the Core component allows an unauthenticated attacker with network access to compromise the server via the SOAP protocol. Successful exploitation can lead to a full takeover of the system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2026-10508
CVE-2026-60200

Affected Products

Oracle Weblogic Server