Oracle WebLogic Server Proxy Plug-in

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 24, 2026
Last mentionedAug 25, 2026

Timeline

2 articles · newest first

U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog

CISA added actively exploited CVE-2026-21962, a CVSS 10.0 unauthenticated flaw in Oracle HTTP Server and WebLogic Proxy Plug-in, to KEV with an August 27 deadline.

Security AffairsAug 25, 08:50 UTC · Aug 25, 2026Exploit / PoCExploitedCVE-2026-21962 CVE-2020-14882 CVE-2020-14883+22

Oracle security advisory – January 2026 quarterly rollup (AV26-042) – Update 2

CISA added actively exploited Oracle flaw CVE-2026-21962 to the KEV catalog; it allows remote unauthorized access to Oracle HTTP Server and WebLogic Proxy Plug-in.

Canadian Centre for Cyber SecurityAug 24, 18:42 UTC · Aug 24, 2026Exploit / PoCExploitedCVE-2026-219624 · 1 read

Related CVEs

by mentions

CVE-2026-2196273%10.0
Unauthenticated Access Control Bypass in Oracle HTTP Server and WebLogic Proxy Plug-in
published Jan 20, 2026Oracle HTTP Server (Oracle Fusion Middleware)KEV
CVE-2020-14882100%9.8
Remote Code Execution in Oracle WebLogic Server
published Oct 21, 2020Oracle WebLogic ServerKEVPoC ×3
CVE-2020-255193%9.8
Unauthenticated Remote Code Execution in Oracle WebLogic Server via IIOP
published Jan 15, 2020Oracle WebLogic Server (Oracle Fusion Middleware, WLS Core Components)KEV
CVE-2017-10271100%7.5
Unauthenticated Remote Code Execution in Oracle WebLogic Server
published Oct 19, 2017Oracle WebLogic ServerKEVRansomwarePoC ×3
CVE-2020-1488398%7.2
High-Privilege Console Flaw in Oracle WebLogic Server Enables Full Takeover
published Oct 21, 2020Oracle WebLogic Server (Console component, Oracle Fusion Middleware)KEV

Appears with

CISAorganization · 2
Oracle HTTP Serverproduct · 2
Oraclevendor · 2
Oracleorganization · 1
CloudSEKorganization · 1
Oracle Fusion Middlewareproduct · 1
Canadian Centre for Cyber Securityorganization · 1

Entities are extracted by the model from each article. First seen Aug 24, 2026, last mentioned Aug 25, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.