CVE-2026-60208

Analyzed Analyzed - Analysis Complete

Unauthenticated Data Access in Oracle WebLogic Server

Publication date: 2026-07-21

Last updated on: 2026-07-28

Assigner: Oracle

Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data as well as unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-28

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-60208

EUVD

EUVD-2026-46614

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	weblogic_server	12.2.1.4.0
oracle	weblogic_server	14.1.1.0.0
oracle	weblogic_server	14.1.2.0.0
oracle	weblogic_server	15.1.1.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle WebLogic Server where an unauthenticated attacker can remotely access the system via HTTP. It allows unauthorized creation, deletion, or modification of critical data, or complete access to all accessible data. The CVSS score is 9.1, indicating high severity for confidentiality and integrity impacts.

Detection Guidance

This vulnerability affects Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. To detect it, check if your WebLogic Server version matches these affected versions. Use commands like 'java -jar wls_version.jar' or check the WebLogic Server admin console for version details.

Impact Analysis

If exploited, attackers could steal, alter, or delete sensitive data stored in Oracle WebLogic Server. This could lead to data breaches, unauthorized system access, or disruption of services relying on the server.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations due to unauthorized data access or modification. Organizations using affected WebLogic versions may face legal penalties, fines, or reputational damage.

Mitigation Strategies

Apply the latest security patches from Oracle for affected WebLogic Server versions immediately. Disable unnecessary HTTP access and restrict network exposure to the server. Monitor for unusual activity and review logs for signs of exploitation attempts.

Hi! I’m here to help you understand CVE-2026-60208. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70