Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
严重 CVSS 10.0 CISA KEV 在册
摘要
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in accessible data.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- Oracle:HTTP Server and Oracle Weblogic Server Proxy Plug-in
- :
数据来源
- CISA KEV DATABASE
- NVD DATABASE
CH-4 Twitter/X fair-use 引用
本条引用遵循 DR-006 + DR-008 fair-use 边界：≤280 字符逐字引用、强制 @署名、强制外链原推，不镜像账号或加载平台追踪 widget。
原推作者
阅读原推 · 推文可能被作者删除或账号被封；删除后请参阅 R2 公开归档。
原始链接
- https://www.oracle.com/security-alerts/cpujan2026.html reference
- https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk reference
- https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk reference
- https://nvd.nist.gov/vuln/detail/CVE-2026-21962 reference
- https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1 Broken Link
- https://web.archive.org/web/20260129165916/https://github.com/Ashwesker/Ashwesker-CVE-2026-21962/issues/1 Issue Tracking
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-21962 US Government Resource
- https://x.com/0xacb/status/2015473216844620280 Not Applicable
时间线
- kev_ingest CISA KEV
- nvd_ingest NVD