Unauthenticated Network Access Vulnerability in Oracle WebLogic Server

CVE-2024-21007

Summary

A vulnerability has been identified in Oracle WebLogic Server, part of the Oracle Fusion Middleware suite, affecting version 12.2.1.4.0 and 14.1.1.0.0. This vulnerability can be exploited by unauthenticated attackers with network access through T3 or IIOP protocols, potentially allowing them to gain unauthorized access to critical data stored on WebLogic Server. If successfully exploited, this vulnerability could lead to a complete compromise of the accessible data within the affected Oracle WebLogic Server instances, posing significant risks to organizations relying on these systems. Businesses using the impacted versions are highly encouraged to apply security patches and take necessary measures to safeguard their data and infrastructure.

References