Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Oracle HTTP Server Improper Access Control Vulnerability - CVE-2026-60363 - Vulnerability Database
Oracle HTTP Server

Oracle HTTP Server Improper Access Control Vulnerability - CVE-2026-60363

Critical
Reference: CVE-2026-60363
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-60363
Title: Oracle HTTP Server Improper Access Control Vulnerability
Overview:

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Apache Plugin). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks of this vulnerability can result in takeover of Oracle HTTP Server. CVSS 3.1 Base Score 9.8 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).