CVE-2026-87300 Oracle Corporation CVE debrief

Who should care

Defenders and administrators of Oracle Weblogic Server Proxy Plug-in, particularly those using versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0, should assess their exposure and prioritize patching or implementing compensating controls. This vulnerability's potential impact on additional products requires careful consideration of scope and thorough verification of affected systems.

Why it matters

CVE-2026-87300 is a high-severity vulnerability in Oracle Weblogic Server Proxy Plug-in that allows unauthenticated attackers with network access via HTTP to compromise the plug-in, potentially impacting additional products. Defenders and administrators of affected systems should prioritize patching or implementing compensating controls to prevent potential unauthorized access or data modifications.

• Potential unauthorized creation, deletion, or modification access to critical data
• Potential unauthorized access to critical data or complete access to all Oracle Weblogic Server Proxy Plug-in accessible data
• Need for verification of affected versions and exposure
• High priority for patching due to CVSS 3.1 Base Score of 8.7

Technical summary

The vulnerability exists in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware, specifically in the WebLogic Server Proxy Plug-In for Third-Party Web Servers component. It has a CVSS 3.1 Base Score of 8.7, indicating high severity. The vulnerability is difficult to exploit and allows unauthenticated attackers with network access via HTTP to compromise Oracle Weblogic Server Proxy Plug-in. Successful attacks can lead to unauthorized creation, deletion, or modification access to critical data or all Oracle Weblogic Server Proxy Plug-in accessible data, as well as unauthorized access to critical data or complete access to all Oracle Weblogic Server Proxy Plug-in accessible data.

Defensive priority

High priority for patching and verifying affected systems

Recommended defensive actions

• Apply patches for affected Oracle Weblogic Server Proxy Plug-in versions
• Verify and update inventory of affected systems
• Monitor for potential unauthorized access or data modifications
• Review and implement compensating controls if patching is not feasible
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Evidence notes

The CVE record and NVD detail page provide information on the vulnerability, its impact, and affected versions. Oracle's security alert page also provides relevant details. Defenders should verify the existence of affected product deployments in managed environments, review the official advisory for scope and severity, and plan for vendor-supported updates or mitigations. Compensating controls should be reviewed for exposed systems while remediation is scheduled and verified. Monitoring, detection, and logs should be checked for signs

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.