CVE-2026-83021

Analyzed Analyzed - Analysis Complete

Oracle WebLogic Server Remote Code Execution

Publication date: 2026-09-15

Last updated on: 2026-09-28

Assigner: Oracle

Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-28

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-83021

EUVD

EUVD-2026-79349

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	weblogic_server	12.2.1.4.0
oracle	weblogic_server	14.1.1.0.0
oracle	weblogic_server	14.1.2.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This is a critical vulnerability in Oracle WebLogic Server that allows unauthenticated attackers to remotely compromise the server via HTTP. It affects versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. Successful exploitation can lead to complete takeover of the server with full confidentiality, integrity, and availability impacts.

Detection Guidance

Check if your Oracle WebLogic Server version is 12.2.1.4.0, 14.1.1.0.0, or 14.1.2.0.0. Use commands like 'java -jar wls_version.jar' or check server logs for version details.

Impact Analysis

If you use any of the affected Oracle WebLogic Server versions, an attacker could gain full control over your server without any authentication. This could allow them to steal data, modify or delete files, install malware, or disrupt services entirely.

Compliance Impact

This vulnerability could lead to severe compliance violations under GDPR and HIPAA due to unauthorized access to sensitive data. GDPR requires protecting personal data, and HIPAA mandates safeguarding health information. A successful attack could result in data breaches, fines, and legal penalties.

Mitigation Strategies

Apply the latest Oracle WebLogic Server patch immediately. If patching is not possible, restrict network access to the server via firewall rules or disable HTTP access until patched.

Hi! I’m here to help you understand CVE-2026-83021. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70