CVE-2026-60696
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-60696
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Oracle Corporation | Oracle WebLogic Server | 12.2.1.4.0 | - |
II. Public POCs for CVE-2026-60696
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-60696
请登录查看更多情报信息。
Other References for CVE-2026-60696 (1)
- https://www.oracle.com/security-alerts/cspuaug2026.htmlvendor-advisory
Same Patch Batch · Oracle Corporation · 2026-08-18 · 889 CVEs total
| CVE-2026-70921 | 10.0 CRITICAL | Oracle Hyperion Financial Management 11.2.25.0.000 远程权限漏洞 |
| CVE-2026-61241 | 10.0 CRITICAL | Oracle Fusion Middleware 12.2.1.4/14.1.2.1 OID 未授权访问漏洞 |
| CVE-2026-70880 | 10.0 CRITICAL | Oracle Hyperion 11.2.25.0.000越权访问漏洞 |
| CVE-2026-60720 | 9.9 CRITICAL | Oracle IAM 12.2.1.4/14.1.2.1 高危漏洞致接管 |
| CVE-2026-61248 | 9.9 CRITICAL | Oracle OID 12.2.1.4.0/14.1.2.1.0远程代码执行漏洞 |
| CVE-2026-61003 | 9.9 CRITICAL | Oracle MFT 12.2.1.4.0/14.1.2.0.0远程代码执行漏洞 |
| CVE-2026-61021 | 9.9 CRITICAL | Oracle WebCenter Sites 12.2.1.4.0/14.1.2.0.0 远程代码执行漏洞 |
| CVE-2026-70920 | 9.9 CRITICAL | Oracle Hyperion Financial Management 11.2.25.0.000 高危SQL注入漏洞 |
| CVE-2026-62512 | 9.9 CRITICAL | Oracle Siebel CRM Cloud 多个版本存在远程代码执行漏洞 |
| CVE-2026-62608 | 9.9 CRITICAL | Oracle Reports Developer 12.2.1.19.0远程代码执行漏洞 |
| CVE-2026-60730 | 9.9 CRITICAL | Oracle WebCenter Portal 12.2.1.4.0/14.1.2.0.0 远程代码执行漏洞 |
| CVE-2026-60995 | 9.9 CRITICAL | Oracle Fusion Middleware 12.2.1.4.0/14.1.2.1.0核心组件权限提升漏洞 |
| CVE-2026-60990 | 9.9 CRITICAL | Oracle Fusion Middleware 12.2.1.4.0/14.1.2.1.0 连接器远程代码执行漏洞 |
| CVE-2026-62452 | 9.9 CRITICAL | Oracle Siebel CRM 22.3-26.6 HTTP未授权访问漏洞 |
| CVE-2026-71059 | 9.9 CRITICAL | Oracle BI Publisher多版本Web Service API远程代码执行漏洞 |
| CVE-2026-60702 | 9.9 CRITICAL | WebLogic Server多个版本远程代码执行漏洞 |
| CVE-2026-60916 | 9.9 CRITICAL | Oracle WebCenter Enterprise Capture 12.2.1.4/14.1.2.0 HTTP注入漏洞 |
| CVE-2026-73930 | 9.9 CRITICAL | Oracle Fusion Middleware Helidon 4.5.3 远程代码执行漏洞 |
| CVE-2026-61206 | 9.9 CRITICAL | Oracle Hyperion 11.2.25.0.000 远程代码执行漏洞 |
| CVE-2026-61066 | 9.9 CRITICAL | Oracle Identity Manager 12.2.1.4.0/14.1.2.1.0 RMI远程代码执行漏洞 |
Showing top 20 of 889 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-60696
No comments yet