CVE-2026-21962 Oracle Corporation Oracle HTTP Server, Oracle…
Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected…
- CVSS
- 10.0 Critical
- EPSS
- 73%
- Percentile
- 100
- Published
- 2026-01-20
- Force
- 11 of 12
- Public PoC
- 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
On CISA’s exploited list
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
- Added
- 2026-08-24
- Federal patch deadline
- 2026-08-27
- Ransomware use
- not known