Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of WebLogic Server. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
CVE-2026-35259: Open Redirect in Oracle WebLogic Server Console A critical open redirect bug (CVSS 8.8) in Oracle WebLogic Server Console could lead to phishing attacks. Patch ASAP. For more details, read ZeroPath's blog on this vuln. #AppSec #InfoSec #WebLogic https://zeropath.com/blog/oracle-weblogic-console-cve-2026-35259-open-redirect
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oracle | weblogic_server | 14.1.2.0.0 | - | - |
| App | oracle | weblogic_server | 15.1.1.0.0 | - | - |