Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Remediation

References

CVE-2023-22101

Related Vulnerabilities

Twisted Web HTTP Server Improper Certificate Validation Vulnerability (CVE-2014-7143)

WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (6.0.11)

LimeSurvey Incorrect Default Permissions Vulnerability (CVE-2019-16186)

Moodle Uncontrolled Resource Consumption Vulnerability (CVE-2020-25630)

WordPress Plugin Comment Highlighter SQL Injection (0.13)

Severity

High

Classification

CVE-2023-22101 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities