CVE-2026-60364 Oracle Corporation CVE debrief

Who should care

Organizations using Oracle Weblogic Server Proxy Plug-in versions 12.2.1.4.0 and 14.1.2.0.0 should prioritize patching and monitoring. Affected operators, platforms, vulnerability-management, and security teams should review the official advisory and assess their exposure. They should also verify the integrity of critical data and ensure that compensating controls are in place while remediation is scheduled and verified. Additionally, they should track exceptions, retest remediated assets, and close the item only after evidence is documented. This requires coordination between IT operations, security teams, and management to ensure timely and effective mitigation of the vulnerability's impact. The vulnerability's high CVSS score of 9.8 indicates a critical severity level, emphasizing the need for prompt action to prevent potential unauthorized access and data manipulation. Therefore, it is crucial for organizations to assess their current configurations, identify potential vulnerabilities, and implement necessary security measures to protect against potential attacks. This may involve updating affected software, enhancing network security, and increasing monitoring and incident response capabilities. By taking proactive steps, organizations can minimize the risk associated with this vulnerability and protect their critical assets from potential exploitation. Furthermore, organizations should consider implementing additional security controls, such as multi-factor authentication, to reduce the risk of unauthorized access. They should also review their incident response plans to ensure they are prepared to respond quickly and effectively in the event of a security incident. Overall, a comprehensive and proactive approach is necessary to mitigate the risks associated with this vulnerability and protect against potential attacks. The affected versions 12.2.1.4.0 and 14.1.2.0.0 should be prioritized for patching, and organizations should also consider implementing compensating controls, such as restricting network access, monitoring for suspicious activity, and performing inventory checks for affected versions. By taking these steps, organizations can reduce the risk

Technical summary

The Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware has a vulnerability in the WebLogic Server Proxy Plug-In for Third-Party Web Servers. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Weblogic Server Proxy Plug-in. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Weblogic Server Proxy Plug-in accessible data.

Defensive priority

High priority due to critical CVSS score of 9.8 and potential for unauthorized creation, deletion or modification access to critical data.

Recommended defensive actions

• Verify and apply Oracle Weblogic Server Proxy Plug-in patches
• Restrict network access to Oracle Weblogic Server Proxy Plug-in
• Monitor for suspicious activity
• Perform inventory checks for affected versions 12.2.1.4.0 and 14.1.2.0.0
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

Evidence from official CVE and NVD sources indicates a vulnerability in Oracle Weblogic Server Proxy Plug-in with a CVSS score of 9.8. Further analysis and verification are needed to determine the full scope of the vulnerability, including known and unknown affected scope, and what defenders should verify. The CVE record was published on 2026-07-21T22:17:39.747Z and has not been modified since then. However, defenders should verify the official advisory for the most current information.

Official resources