CVE-2026-46848

Modified Modified - Updated After Analysis

Unauthorized Data Access in Oracle WebLogic Server

Publication date: 2026-06-17

Last updated on: 2026-06-23

Assigner: Oracle

Description

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where WebLogic Server executes to compromise WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all WebLogic Server accessible data. CVSS 3.1 Base Score 7.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-17

Last Modified

2026-06-23

Generated

2026-07-08

AI Q&A

2026-06-17

EPSS Evaluated

2026-07-06

NVD

CVE-2026-46848

EUVD

EUVD-2026-37341

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	weblogic_server	14.1.2.0.0
oracle	weblogic_server	15.1.1.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the WebLogic Server product of Oracle Fusion Middleware, specifically in the Console component. It affects supported versions 14.1.2.0.0 and 15.1.1.0.0. The vulnerability is easily exploitable by a low privileged attacker who has logon access to the infrastructure where WebLogic Server runs. However, successful exploitation requires human interaction from someone other than the attacker. Although the vulnerability is within WebLogic Server, attacks may impact additional products due to scope change.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or any data accessible by WebLogic Server. It can also result in unauthorized access to critical or all accessible data within WebLogic Server.

Impact Analysis

This vulnerability can have serious impacts including unauthorized creation, deletion, or modification of critical data within WebLogic Server. It can also lead to unauthorized access to critical or all data accessible by the server. Because the vulnerability requires low privileges but human interaction, it can be exploited to compromise the integrity and confidentiality of your data and systems running WebLogic Server.

Compliance Impact

This vulnerability allows unauthorized creation, deletion, or modification of critical data, as well as unauthorized access to critical or all accessible data within WebLogic Server. Such unauthorized access and data manipulation can lead to violations of data protection requirements found in common standards and regulations like GDPR and HIPAA, which mandate the protection of confidentiality and integrity of sensitive data.

Because the vulnerability impacts confidentiality and integrity of data, organizations affected by this vulnerability may face compliance risks, including potential breaches of regulatory obligations to safeguard personal and sensitive information.

Hi! I’m here to help you understand CVE-2026-46848. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70