CVE-2026-60313: High severity Oracle Oracle WebLogic Server vulnerability
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via RMI to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle WebLogic Server (Oracle Fusion Middleware)to a version that resolves this vulnerability.Fixed in 12.2.1.4.0 - Upgrade
Upgrade
Oracle WebLogic Server (Oracle Fusion Middleware)to a version that resolves this vulnerability.Fixed in 14.1.1.0.0 - Upgrade
Upgrade
Oracle WebLogic Server (Oracle Fusion Middleware)to a version that resolves this vulnerability.Fixed in 14.1.2.0.0 - Upgrade
Upgrade
Oracle WebLogic Server (Oracle Fusion Middleware)to a version that resolves this vulnerability.Fixed in 15.1.1.0.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60313?
The severity of CVE-2026-60313 is high with a score of 8.8.
What systems are affected by CVE-2026-60313?
CVE-2026-60313 affects Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.
How do I fix CVE-2026-60313?
To fix CVE-2026-60313, apply the latest security patches provided by Oracle for the affected WebLogic Server versions.
What is the impact of exploiting CVE-2026-60313?
Exploiting CVE-2026-60313 can allow a low privileged attacker to compromise the Oracle WebLogic Server via RMI.
How easily can CVE-2026-60313 be exploited?
CVE-2026-60313 is considered easily exploitable due to its low access requirements for attackers.