CVE-2026-87302

Analyzed Analyzed - Analysis Complete

Unauthenticated Data Access in Oracle WebLogic Server

Publication date: 2026-10-20

Last updated on: 2026-11-05

Assigner: Oracle

Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-11-05

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-87302

EUVD

EUVD-2026-106343

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	weblogic_server	12.2.1.4.0
oracle	weblogic_server	14.1.1.0.0
oracle	weblogic_server	14.1.2.0.0
oracle	weblogic_server	15.1.1.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the server. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to all accessible data on the server.

Detection Guidance

This vulnerability affects Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Detection involves checking the installed version of Oracle WebLogic Server against these affected versions. Use commands like 'java -jar wls.jar -version' or check the server logs for version information.

Impact Analysis

This vulnerability can allow attackers to gain full access to your Oracle WebLogic Server data, including sensitive information. They could modify or delete critical data, steal confidential information, or disrupt server operations. The high CVSS score indicates a severe risk of data breaches and system compromise.

Compliance Impact

This vulnerability can lead to unauthorized access or modification of sensitive data, which directly violates compliance requirements under GDPR (data protection) and HIPAA (health information privacy). Organizations using affected WebLogic Server versions may face legal penalties, data breach notifications, and loss of trust.

Mitigation Strategies

Apply the latest Oracle WebLogic Server patches immediately as they become available. Monitor Oracle security advisories for updates. Restrict network access to WebLogic Server instances via firewalls or network segmentation. Disable unnecessary services and ports. Review and audit user permissions and access controls.

Hi! I’m here to help you understand CVE-2026-87302. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...