They said Oracle has issued a patch for this issue, outside its normal patch cycle, on 26 April. "This vulnerability is easy for attackers to exploit, as anyone with HTTP access to the WebLogic server ...