CyberSec.Space Logo
Back to CVE Browser

CVE-2026-35292

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0330%
EPSS Percentile23.38th
PublishedJun 17, 2026
Last ModifiedJun 18, 2026

Vulnerability Description

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise WebLogic Server. While the vulnerability is in WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of WebLogic Server. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://www.oracle.com/security-alerts/cspujun2026.html

Related Vulnerabilities

CVE-2026-4678110.0

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle). Supporte...

CVE-2026-2012710.0

A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN M...

CVE-2026-2018210.0

May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after ...

CVE-2026-3530110.0

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affect...