Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle WebLogic Server executes to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 4.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpujul2025.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
24 Jul 2025, 20:27
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* |
|
| First Time |
Oracle weblogic Server
Oracle |
|
| References | () https://www.oracle.com/security-alerts/cpujul2025.html - Patch, Vendor Advisory |
16 Jul 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
16 Jul 2025, 14:58
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
15 Jul 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-15 20:15
Updated : 2025-07-24 20:27
NVD link : CVE-2025-50072
Mitre link : CVE-2025-50072
CVE.ORG link : CVE-2025-50072
JSON object : View
Products Affected
oracle
- weblogic_server
CWE
CWE-284
Improper Access Control