Authentication Bypass in Oracle WebLogic Server by Oracle

CVE-2025-50072

What is CVE-2025-50072?

An unauthenticated attacker with access to the infrastructure hosting Oracle WebLogic Server can exploit this vulnerability to compromise the server. The flaw allows unauthorized updates, inserts, or deletions of data accessible by the Oracle WebLogic Server, posing significant risks to data integrity. Affected versions include Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. It is crucial for organizations using these versions to implement immediate security measures to safeguard against possible exploitation.

References