Description
Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle Weblogic Server Proxy Plug-in accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N).
Published: 2026-10-20
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized data modification and deletion
Action: Patch
AI Analysis

Impact

Oracle Weblogic Server Proxy Plug‑in is vulnerable to a difficult‑to‑exploit flaw that allows an unauthenticated attacker with network access via HTTP to create, delete or modify critical data. Based on the description, it is inferred that this flaw is a CWE‑284: Access Control Weakness. The vulnerability can also provide unauthorized access to all data accessible through the Proxy Plug‑in, potentially exposing sensitive information. The CVSS v3.1 base score is 8.7, indicating a high impact on confidentiality and integrity with a scope change.

Affected Systems

Affected are Oracle Corporation’s Oracle Weblogic Server Proxy Plug‑in for the following releases: 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. Because the vulnerability’s scope changes, other products within the Oracle Fusion Middleware stack may also be at risk.

Risk and Exploitability

With a CVSS score of 8.7 and an EPSS score of 0.00318, the likelihood of exploitation is currently very low, but the high severity and scope change mean the vulnerability poses significant confidentiality and integrity risks. The flaw can be exploited without authentication or additional privileges once the low EPSS rate is surpassed. Although the vulnerability is not currently listed in the CISA KEV catalog, its high severity and potential for significant business impact necessitates immediate remediation.

Generated by OpenCVE AI on October 22, 2026 at 08:15 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Install the latest Oracle Weblogic Server Proxy Plug‑in security update that addresses the unauthenticated HTTP endpoint flaw for versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0.
  • If a patch is not yet available, restrict or disable external HTTP access to the Proxy Plug‑in endpoint using firewall rules or network ACLs.
  • Deploy monitoring to detect unauthorized creation, deletion, or modification of Proxy Plug‑in data, and conduct regular integrity checks of critical data sets.

Generated by OpenCVE AI on October 22, 2026 at 08:15 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 22 Oct 2026 08:45:00 +0000

Type Values Removed Values Added
Title Unauthenticated HTTP Exploit Grants Unauthorized Data Modification in Oracle Weblogic Server Proxy Plug‑in
Weaknesses CWE-284

Tue, 20 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Description Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Weblogic Server Proxy Plug-in accessible data as well as unauthorized access to critical data or complete access to all Oracle Weblogic Server Proxy Plug-in accessible data. CVSS 3.1 Base Score 8.7 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N).
First Time appeared Oracle
Oracle weblogic Server Proxy Plug-in
CPEs cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:12.2.1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:14.1.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:weblogic_server_proxy_plug-in:14.1.2.0.0:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle weblogic Server Proxy Plug-in
References
Metrics cvssV3_1

{'score': 8.7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N'}

Subscriptions

Oracle Weblogic Server Proxy Plug-in
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-10-27T19:20:48.768Z

Reserved: 2026-09-08T21:49:12.409Z

Link: CVE-2026-87300

cve-icon Vulnrichment

Updated: 2026-10-27T19:20:36.491Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-20T22:20:07.087

Modified: 2026-11-05T19:36:10.373

Link: CVE-2026-87300

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T21:00:08Z

Weaknesses