Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: Oracle HTTP Server — oracle.com/security-alerts/cpujul2026.html Clear all filters
TI-2026-43195 CVE-2026-60530 · GHSA-376c-84pj-3hj8

Improper privilege management in Oracle HTTP Server

Priority LOW 35

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_http2.so).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2026-07-21 No fix listed CWE-269
TI-2026-43151 CVE-2026-60454 · GHSA-6c8m-vp6x-fmhj

Improper privilege management in Oracle HTTP Server

Priority LOW 35

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2026-07-21 No fix listed CWE-269
TI-2026-43136 CVE-2026-60438 · GHSA-67jp-m3r7-6hq2

Improper access control in Oracle HTTP Server

Priority MEDIUM 48

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_ssl).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-07-21 No fix listed CWE-284
TI-2026-43130 CVE-2026-60431 · GHSA-mr3v-jwh6-mmp4

Information disclosure in Oracle HTTP Server

Priority MEDIUM 44

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_proxy).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00437 Published 2026-07-21 No fix listed CWE-200
TI-2026-43065 CVE-2026-60365 · GHSA-h7j7-j4hp-pqf3

Missing authentication in Oracle HTTP Server

Priority MEDIUM 49

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00425 Published 2026-07-21 No fix listed CWE-306
TI-2026-43064 CVE-2026-60364 · GHSA-2q8m-vp67-qw33

Improper access control in Oracle HTTP Server

Priority MEDIUM 49

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284
TI-2026-43063 CVE-2026-60363 · GHSA-pgwq-c6w2-4hh7

Improper access control in Oracle HTTP Server

Priority MEDIUM 49

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Apache Plugin).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284