CVE-2026-35302: High severity Oracle WebLogic Server vulnerability
Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of WebLogic Server. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
If the WebLogic Console is not required, disable the Console or otherwise disable its HTTP access. If it is required, restrict Console access to the management/network segment only.
WebLogic Server (Console) Console HTTP access = disabled or restricted - Compensating control
Restrict network access to the WebLogic Server HTTP ports (Console) to trusted IP addresses via firewall or ACLs and/or place the service behind a Web Application Firewall to reduce exposure to unauthenticated HTTP-based attacks.
- Operational
Monitor WebLogic Servers for indicators of compromise and signs of takeover; if exploitation is suspected, isolate affected hosts, preserve logs for analysis, and carry out incident response (including credential rotation as appropriate).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35302?
The severity of CVE-2026-35302 is high with a score of 8.3.
How do I fix CVE-2026-35302?
To fix CVE-2026-35302, update WebLogic Server to the latest supported version that is not affected by this vulnerability.
What kind of impact can CVE-2026-35302 have on my system?
CVE-2026-35302 can allow an unauthenticated attacker to compromise WebLogic Server and potentially result in significant data exposure or manipulation.
Which versions of Oracle WebLogic Server are affected by CVE-2026-35302?
The affected versions of Oracle WebLogic Server for CVE-2026-35302 are 12.2.1.4.0 and 14.1.1.0.0.
How can an attacker exploit CVE-2026-35302?
An attacker can exploit CVE-2026-35302 through network access via HTTP, taking advantage of the vulnerability to compromise the server.