Weblogic Server Proxy Plug-in vulnerabilities

4 known vulnerabilities in Weblogic Server Proxy Plug-in from Oracle. 4 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Oracle Weblogic Server Proxy Plug-in: Improper Access Control

  CVE-2026-87300Oct 20, 2026Oracle

  Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Difficult to e

• 10.0 Critical severity

  Oracle HTTP Server: Missing Authentication for Critical Functionality

  CVE-2026-60365Jul 21, 2026Oracle

  Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows

• 9.8 Critical severity

  Oracle HTTP Server: Improper Access Control

  CVE-2026-60364Jul 21, 2026Oracle

  Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnera

• 10.0 Critical severity

  Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Exploited

  CVE-2026-21962Jan 20, 2026OracleEPSS 73.2%

  Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected are