UpHeron
All vulnerabilities

Servers and applications

CVE-2026-101515

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can…

Severity
Medium 5.9
Published
20 Oct 2026
Last changed
20 Oct 2026
Added to UpHeron
3 Nov 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Oracle WebLogic ServerServers and applications · cna:oracle corporation|oracle weblogic server
  • Every version up to 12.2.1.4.0
  • From 14 up to 14.1.1.0.0
  • From 14.1.2 up to 14.1.2.0.0
  • From 15 up to 15.1.1.0.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-101515