CVE-2026-35291: Medium severity Oracle WebLogic Server vulnerability
Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise WebLogic Server. Successful attacks of this vulnerability can result in takeover of WebLogic Server. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable access to the administration Console over HTTP if the Console is not required. If Console access is required, restrict it to management networks and require secure access (e.g., HTTPS) and strong authentication.
Oracle WebLogic Server Console HTTP access = disabled - Compensating control
Restrict network access to the WebLogic Server administration Console over HTTP using firewall rules/ACLs or network isolation so only trusted IPs/networks can reach the service; block public/untrusted access.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35291?
CVE-2026-35291 has a medium severity rating of 6.6.
How do I fix CVE-2026-35291?
To fix CVE-2026-35291, apply the latest security patches provided by Oracle for the affected versions of WebLogic Server.
What versions of Oracle WebLogic Server are affected by CVE-2026-35291?
The affected versions of Oracle WebLogic Server are 14.1.2.0.0 and 15.1.1.0.0.
Who can exploit CVE-2026-35291?
CVE-2026-35291 can be exploited by an attacker with high privileges and network access via HTTP.
What components of Oracle Fusion Middleware are impacted by CVE-2026-35291?
CVE-2026-35291 impacts the Console component of the Oracle WebLogic Server product in Oracle Fusion Middleware.