Unauthorized Access Vulnerability in Oracle WebLogic Server by Oracle

CVE-2023-21956

Summary

A weakness in Oracle WebLogic Server, part of the Oracle Fusion Middleware suite, enables an unauthenticated attacker with network access via HTTP to compromise the server. While the attack requires human interaction from a user other than the attacker, the consequences can extend beyond WebLogic Server itself, jeopardizing additional Oracle products. Successful exploitation of this vulnerability may allow unauthorized manipulation, including updates, inserts, or deletions of accessible data, as well as unauthorized reading of sensitive datasets.

References