Unauthenticated Remote Access Vulnerability in Oracle WebLogic Server by Oracle
CVE-2021-2157

7.5HIGH

Key Information:

Vendor

Oracle
Status
Toplink
Vendor
CVE Published:
22 April 2021

What is CVE-2021-2157?

The vulnerability in Oracle WebLogic Server allows unauthenticated attackers with network access via HTTP to gain unauthorized access. It affects several versions of the product and can lead to unauthorized exposure of critical data, putting organizations at risk of significant data breaches. Addressing this vulnerability is crucial for maintaining the security of systems relying on Oracle WebLogic Server.

Affected Version(s)

TopLink 10.3.6.0.0

TopLink 12.1.3.0.0

TopLink 12.2.1.3.0

References

https://www.oracle.com/security-alerts/cpuapr2021.html
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.