CVE-2026-60528

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 14.1.2.0.0 Oracle WebLogic Server version 15.1.1.0.0

Description A flaw in the Console component of Oracle Fusion Middleware allows a high privileged attacker with network access via HTTP to compromise the server. This issue can lead to unauthorized read access to a subset of data, as well as unauthorized creation, deletion, or modification of critical data or all data accessible by the server. The impact may extend beyond the server to affect additional products due to a scope change.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.