Skip to content
fr Sign in
8.8 High

CVE-2026-35299 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console)

Description

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebLogic Server. Successful attacks of this vulnerability can result in takeover of WebLogic Server. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected products and versions

Product Affected versions Fixed in
WebLogic Server 14.1.1.0.0 No fix stated
WebLogic Server 12.2.1.4.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of WebLogic Server

The 190 CVEs of WebLogic Server →
CVE-2026-46848 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console) 7.9 High CVE-2026-35311 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core) 8.8 High CVE-2026-35302 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console) 8.3 High CVE-2026-35303 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console) 8.8 High
Track this CVE