Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2026-60415 - Vulnerability Database
WebLogic

WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2026-60415

High
Reference: CVE-2026-60415
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-60415
Title: WebLogic Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 14.1.1.0.0 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3 IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 8.1 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).