CVE-2026-60206

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0

Description An authentication procedure flaw in the Core component allows a low privileged attacker with network access to compromise the server via the SAML (Security Assertion Markup Language) protocol. Successful exploitation can lead to a full takeover of the server and may significantly impact additional integrated products through a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.