CVE-2026-60293

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0

Description A flaw in the WLS - Web Services component of Oracle Fusion Middleware allows an unauthenticated remote attacker to compromise the server via the HTTP protocol. This issue stems from insufficient protection of service data, which can lead to unauthorized access to critical information or complete access to all accessible data on the server. The impact may extend beyond the server to affect additional integrated products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.