OSA-38184939 | Vulnetix

OSA-38184939 PUBLISHED CVSS 5.800000190734863 MEDIUM

Record from oracle · Published January 20, 2026

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized Third Party Jars (Nimbus JOSE+JWT)). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 5.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L).

Risk scores

CVSS 3.1

5.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Timeline

Jan 20, 2026 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln OSA-38184939
vulnetix vdb fixes OSA-38184939

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/OSA-38184939/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Oracle CPU cpujan2026 — CVE-2025-53864 advisory

Look up in the Resolve Platform →