Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in vulnerabilities

1 known vulnerability in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in from Oracle. 1 is rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Exploited

  CVE-2026-21962Jan 20, 2026OracleEPSS 73.2%

  Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected are