CVE-2026-60415: Infoleak
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
Which WebLogic Server versions are affected?
The affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.
Does an attacker need credentials or user interaction to exploit this issue?
No. The vulnerability can be exploited by an unauthenticated attacker and does not require user interaction, although exploitation is described as difficult.
What network access does an attacker need?
The attacker needs network access to the WebLogic Server through T3 or IIOP. Systems where those services are reachable by untrusted networks are exposed to this attack path.
What is the potential impact of successful exploitation?
Successful exploitation can result in takeover of Oracle WebLogic Server, with high confidentiality, integrity, and availability impact.