Vulnerability in Oracle WebLogic Server Affecting Oracle Fusion Middleware
CVE-2023-22040

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Weblogic Server
Vendor
CVE Published:
18 July 2023

What is CVE-2023-22040?

A significant vulnerability has been identified in Oracle WebLogic Server, part of Oracle Fusion Middleware. This vulnerability allows an attacker with high privileges and network access via various protocols to exploit the system. Successful exploitation can enable unauthorized actions, such as creating, deleting, or modifying critical data and causing disruptions through process hangs or frequent crashes, significantly impacting the integrity and availability of the server.

Affected Version(s)

WebLogic Server 12.2.1.4.0

WebLogic Server 14.1.1.0.0

References

https://www.oracle.com/security-alerts/cpujul2023.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.