Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

23 records

Advisory: Oracle WebLogic Server — oracle.com/security-alerts/cpujul2026.html Clear all filters
TI-2026-43194 CVE-2026-60529 · GHSA-xvqh-pg75-hr4f

Improper access control in Oracle WebLogic Server

Priority LOW 34

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00486 Published 2026-07-21 No fix listed CWE-284
TI-2026-43193 CVE-2026-60528 · GHSA-ch59-3g4r-2xv7

Improper access control in Oracle WebLogic Server

Priority LOW 35

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00314 Published 2026-07-21 No fix listed CWE-284
TI-2026-43192 CVE-2026-60527 · GHSA-c9jp-cw45-rgmv

Improper access control in Oracle WebLogic Server

Priority LOW 32

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 7.1 Local No auth No interaction EPSS 0.00182 Published 2026-07-21 No fix listed CWE-284
TI-2026-43043 CVE-2026-60343 · GHSA-9hm6-79cm-xrr8

Improper access control in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284
TI-2026-43014 CVE-2026-60313 · GHSA-w26r-7wrh-3r44

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-306
TI-2026-43013 CVE-2026-60312 · GHSA-2j2f-pqxr-xr4h

Missing authentication in Oracle WebLogic Server

Priority LOW 37

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-306
TI-2026-42995 CVE-2026-60294 · GHSA-gfvr-mx87-vw5j

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-42994 CVE-2026-60293 · GHSA-4p6j-5j8j-4f72

Information disclosure in Oracle WebLogic Server

Priority MEDIUM 44

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS - Web Services).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00437 Published 2026-07-21 No fix listed CWE-200
TI-2026-42993 CVE-2026-60292 · GHSA-jj7j-v98p-cfq5

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-42992 CVE-2026-60291 · GHSA-m45f-j92r-qrj9

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-42908 CVE-2026-60207 · GHSA-92v6-hg99-rrh7

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-306
TI-2026-42907 CVE-2026-60206 · GHSA-crc2-q53j-p7j9

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 43

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-306
TI-2026-42906 CVE-2026-60205 · GHSA-p664-7m6w-5c4c

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-42905 CVE-2026-60204 · GHSA-hg6v-vh44-p6vp

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-42904 CVE-2026-60203 · GHSA-rqw7-95r3-7jq6

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-306
TI-2026-42903 CVE-2026-60202 · GHSA-c6r7-3wc5-q688

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 43

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-42902 CVE-2026-60201 · GHSA-hhq4-53w6-w7v5

Missing authentication in Oracle WebLogic Server

Priority LOW 37

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-306
TI-2026-42901 CVE-2026-60200 · GHSA-jm6v-c992-qpjv

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-42900 CVE-2026-60199 · GHSA-hqjw-2f5m-pw33

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-42899 CVE-2026-60198 · GHSA-4q45-xm9v-jj8c

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-306
TI-2026-42897 CVE-2026-60196 · GHSA-cwj7-79pq-6rff

Improper access control in Oracle WebLogic Server

Priority LOW 39

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.00378 Published 2026-07-21 No fix listed CWE-284
TI-2026-42854 CVE-2026-60153 · GHSA-jhvx-53r8-58rj

Missing authentication in Oracle WebLogic Server

Priority LOW 34

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00486 Published 2026-07-21 No fix listed CWE-306