Unauthenticated Vulnerability in Oracle Weblogic Server Proxy Plug-in

CVE-2026-83379

What is CVE-2026-83379?

The Oracle Weblogic Server Proxy Plug-in, part of Oracle Fusion Middleware, has a vulnerability that allows an unauthenticated attacker with network access via HTTP to potentially compromise the plug-in. This vulnerability affects versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0, and while challenging to exploit, it can have significant repercussions on associated products. Successful exploitation may lead to unauthorized actions such as the creation, deletion, or modification of accessible data within the Oracle Weblogic Server Proxy Plug-in, thereby compromising the integrity and confidentiality of critical data. Organizations using affected versions should review their security policies and apply necessary precautions.

References