Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WebLogic Missing Authentication for Critical Function Vulnerability - CVE-2026-60206 - Vulnerability Database
WebLogic

WebLogic Missing Authentication for Critical Function Vulnerability - CVE-2026-60206

Critical
Reference: CVE-2026-60206
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-60206
Title: WebLogic Missing Authentication for Critical Function Vulnerability
Overview:

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 14.1.1.0.0 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SAML to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.9 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).