Research · Jan 20, 2026
Critical Access Control Vulnerability Discovered in Oracle HTTP Server and Weblogic Server Proxy Plug-in
A serious vulnerability affecting Oracle's HTTP Server and Weblogic Server Proxy Plug-in has been identified, allowing unauthenticated attackers to exploit the system remotely.
What changed
An improper access control vulnerability has been discovered in the Oracle HTTP Server and the Oracle Weblogic Server Proxy Plug-in. This flaw enables unauthenticated attackers to gain unauthorized access through HTTP, potentially compromising the affected systems.
- The vulnerability is present in the Oracle Fusion Middleware component.
- Affected versions include 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0.
- The issue is particularly concerning due to its ease of exploitation.
Who is affected
Organizations utilizing Oracle's HTTP Server or Weblogic Server Proxy Plug-in are at risk. The vulnerability may lead to significant impacts on their infrastructure and data security.
- Users of Oracle HTTP Server, particularly in enterprise environments.
- Organizations leveraging Oracle Weblogic Server Proxy Plug-in for Apache HTTP Server.
- Businesses utilizing the Weblogic Server Proxy Plug-in for IIS.
What to do
It is crucial for affected organizations to assess their systems and apply necessary security measures to mitigate the risks associated with this vulnerability.
- Review and update to the latest supported versions of Oracle products.
- Implement network access controls to limit exposure to the vulnerability.
- Monitor for unusual activity that may indicate exploitation attempts.