Description
The Oracle WebLogic Async Component is vulnerable to a XML Deserialization remote code execution vulnerability. Malicious input passed to the XMLDecoder results in the deserialization of an arbitrary Java serialized object. Unauthenticated attackers can exploit it to remotely execute arbitrary code.
Remediation
Oracle released a Critical Patch Update that fixes this issue. To fix this vulnerability it's recommended to install the Oracle Critical Patch Update from the References section.