Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WebLogic Improper Access Control Vulnerability - CVE-2026-60529 - Vulnerability Database
WebLogic

WebLogic Improper Access Control Vulnerability - CVE-2026-60529

High
Reference: CVE-2026-60529
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-60529
Title: WebLogic Improper Access Control Vulnerability
Overview:

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 7.2 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).