A flaw in the Console component of Oracle WebLogic Server allows an attacker to execute arbitrary code without prior authentication. If successfully exploited, the attacker can fully compromise the server, leading to loss of confidentiality, integrity, and availability. The vulnerability is identified as CWE‑601 and presents a high‑impact risk to systems exposing the Console over HTTP.

The affected editions are Oracle WebLogic Server 12.2.1.4.0 and 14.1.1.0.0. These versions are found in many enterprise deployments and may also influence integrated Fusion Middleware components.

The CVSS v3.1 base score of 8.3 indicates high severity, while the EPSS score of less than 1% suggests the exploitation likelihood is currently low. Because the vulnerability is not listed in CISA's KEV catalog, public exploitation is not confirmed, yet the attack vector is network‑based via HTTP to the Console endpoint, requiring only minimal configuration changes on the target. Successful attacks would elevate the attacker’s privilege to administrator level, allowing full control of the WebLogic server and potentially affecting other products in the same environment.