Unauthenticated Remote Code Execution in Oracle WebLogic Server

Publication date: 2026-06-17

Last updated on: 2026-06-18

Assigner: Oracle

Description

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of WebLogic Server. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-17

Last Modified

2026-06-18

Generated

2026-07-07

AI Q&A

2026-06-17

EPSS Evaluated

2026-07-06

NVD

CVE-2026-35259

EUVD

EUVD-2026-37393

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	weblogic_server	14.1.2.0.0
oracle	weblogic_server	15.1.1.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the WebLogic Server product of Oracle Fusion Middleware, specifically in the Console component. It affects supported versions 14.1.2.0.0 and 15.1.1.0.0. The vulnerability is easily exploitable by an unauthenticated attacker who has network access via HTTPS. However, successful exploitation requires human interaction from someone other than the attacker. If exploited successfully, the attacker can take over the WebLogic Server.

Impact Analysis

The impact of this vulnerability is severe as it can lead to a complete takeover of the WebLogic Server. This means an attacker could gain full control over the server, potentially compromising confidentiality, integrity, and availability of the system and its data.

Hi! I’m here to help you understand CVE-2026-35259. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70