CVE-2026-60313

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0

Description A flaw in the Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via RMI (Remote Method Invocation, a Java API that allows an object to invoke methods on an object running in another Java Virtual Machine) to compromise the server. Successful exploitation can lead to a full takeover of the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.