CVE-2026-60343: High severity Oracle Oracle WebLogic Server vulnerability
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60343?
The severity of CVE-2026-60343 is classified as high with a score of 8.8.
What are the affected versions for CVE-2026-60343?
The affected versions for CVE-2026-60343 are Oracle WebLogic Server 12.2.1.4.0 and 14.1.1.0.0.
How can I exploit CVE-2026-60343?
CVE-2026-60343 can be exploited by a low privileged attacker with network access via HTTP.
How do I fix CVE-2026-60343?
To fix CVE-2026-60343, apply the latest patches provided by Oracle for the affected WebLogic Server versions.
What impact does CVE-2026-60343 have on Oracle WebLogic Server?
CVE-2026-60343 allows an attacker to compromise Oracle WebLogic Server, potentially resulting in elevated privileges and loss of confidentiality, integrity, and availability.