Unauthorized Access Vulnerability in Oracle WebLogic Server by Oracle
CVE-2023-21956
What is CVE-2023-21956?
A weakness in Oracle WebLogic Server, part of the Oracle Fusion Middleware suite, enables an unauthenticated attacker with network access via HTTP to compromise the server. While the attack requires human interaction from a user other than the attacker, the consequences can extend beyond WebLogic Server itself, jeopardizing additional Oracle products. Successful exploitation of this vulnerability may allow unauthorized manipulation, including updates, inserts, or deletions of accessible data, as well as unauthorized reading of sensitive datasets.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
WebLogic Server 12.2.1.4.0
WebLogic Server 14.1.1.0.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved