Description
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
Published: 2026-10-20
Score: 9.1 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote unauthorized data access and modification
Action: Patch Now
AI Analysis

Impact

The vulnerability in Oracle WebLogic Server’s core module allows an unauthenticated attacker who can reach the server over HTTP to create, delete, or alter critical data. This flaw supports unauthorized manipulation of server resources, directly impacting confidentiality and integrity.

Affected Systems

Affected versions include Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, all part of Oracle Fusion Middleware.

Risk and Exploitability

CVSS 9.1 indicates high severity with full confidentiality and integrity impact. The EPSS score is less than 1%, suggesting low exploitation probability currently, but the lack of a KEV listing does not reduce risk. A remote actor can exploit the flaw over HTTP without authentication or user interaction, potentially modifying or deleting critical data and compromising server resources.

Generated by OpenCVE AI on October 22, 2026 at 08:14 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the Oracle WebLogic Server security patch released in the October 2026 CPU advisory.
  • Restrict HTTP access to the WebLogic Server by configuring firewalls or network segmentation so that only trusted hosts can reach it.
  • Enforce TLS on all administrative interfaces and require strong authentication for management connections.
  • Monitor WebLogic logs for unauthorized resource changes and conduct regular integrity audits of application data.

Generated by OpenCVE AI on October 22, 2026 at 08:14 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 22 Oct 2026 08:30:00 +0000

Type Values Removed Values Added
Title Oracle WebLogic Server Core Vulnerability Allows Unauthenticated Remote Data Manipulation

Thu, 22 Oct 2026 03:00:00 +0000

Type Values Removed Values Added
Title Unauthenticated Remote Data Modification in Oracle WebLogic Server
Weaknesses CWE-285

Wed, 21 Oct 2026 11:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-287
CWE-306
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 21 Oct 2026 08:00:00 +0000

Type Values Removed Values Added
Title Unauthenticated Remote Data Modification in Oracle WebLogic Server
Weaknesses CWE-285

Tue, 20 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Description Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
First Time appeared Oracle
Oracle weblogic Server
CPEs cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:weblogic_server:14.1.2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:weblogic_server:15.1.1.0.0:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle weblogic Server
References
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Oracle Weblogic Server
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-10-30T03:55:57.176Z

Reserved: 2026-09-08T21:49:12.410Z

Link: CVE-2026-87302

cve-icon Vulnrichment

Updated: 2026-10-21T10:56:08.722Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-20T22:20:07.320

Modified: 2026-11-05T19:35:48.850

Link: CVE-2026-87302

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T18:45:09Z

Weaknesses
  • CWE-287

    Improper Authentication

  • CWE-306

    Missing Authentication for Critical Function