Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Remediation

References

CVE-2023-21841

Related Vulnerabilities

WordPress Plugin Calendar Event Multi View SQL Injection (1.01)

WordPress Plugin PI Button includes Backdoor [Only if downloaded via the vendor website] (3.3.3)

Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43952)

PHP Deserialization of Untrusted Data Vulnerability (CVE-2007-1701)

WordPress Plugin WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) Multiple Vulnerabilities (7.5.14)

Severity

High

Classification

CVE-2023-21841 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities