Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Advisory: Oracle WebLogic Server — oracle.com/security-alerts/cspujun2026.html Clear all filters
TI-2026-34454 CVE-2026-46848 · GHSA-vqw4-qw3x-53p9

Improper access control in Oracle WebLogic Server

Priority LOW 35

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 7.9 Local Low privileges User interaction EPSS 0.00141 Published 2026-06-16 No fix listed CWE-284
TI-2026-27458 CVE-2026-35311 · GHSA-r8mg-42p6-3g5r

Improper access control in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00411 Published 2026-06-16 No fix listed CWE-284
TI-2026-27450 CVE-2026-35303 · GHSA-hphp-rq59-543g

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00411 Published 2026-06-16 No fix listed CWE-306
TI-2026-27449 CVE-2026-35302 · GHSA-qhj7-cvpp-4wm8

Open redirect in Oracle WebLogic Server

Priority LOW 38

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00333 Published 2026-06-16 No fix listed CWE-601
TI-2026-27448 CVE-2026-35301 · GHSA-x693-f8xh-9v4v

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00483 Published 2026-06-16 No fix listed CWE-306
TI-2026-27446 CVE-2026-35299 · GHSA-xh2m-c94j-jfx6

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00411 Published 2026-06-16 No fix listed CWE-306
TI-2026-27445 CVE-2026-35298 · GHSA-287r-jpj4-cv8r

Improper access control in Oracle WebLogic Server

Priority MEDIUM 42

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00463 Published 2026-06-16 No fix listed CWE-284
TI-2026-27440 CVE-2026-35292 · GHSA-mvj7-pfpf-qrcj

Missing authentication in Oracle WebLogic Server

Priority MEDIUM 49

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00483 Published 2026-06-16 No fix listed CWE-306
TI-2026-27439 CVE-2026-35291 · GHSA-v5p2-88g7-mvfh

Improper privilege management in Oracle WebLogic Server

Priority LOW 31

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.0035 Published 2026-06-16 No fix listed CWE-269
TI-2026-27412 CVE-2026-35263 · GHSA-2jgh-wrm7-gc7x

Improper access control in Oracle WebLogic Server

Priority MEDIUM 43

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00362 Published 2026-06-16 No fix listed CWE-284
TI-2026-27409 CVE-2026-35259 · GHSA-94hv-5945-c453

Open redirect in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00389 Published 2026-06-16 No fix listed CWE-601
TI-2026-27408 CVE-2026-35258 · GHSA-9hfg-2wcx-mfh7

Open redirect in Oracle WebLogic Server

Priority LOW 39

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00305 Published 2026-06-16 No fix listed CWE-601