Unauthenticated Remote Code Execution in Oracle WebLogic Server

CVE-2024-21175

Summary

A recently identified vulnerability in Oracle WebLogic Server poses a significant threat to data integrity. This issue allows an unauthenticated attacker with HTTP network access to gain unauthorized control over the affected systems. The vulnerability affects Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0, enabling attackers to create, delete, or modify critical data without proper authentication. Businesses relying on these versions of WebLogic Server should prioritize immediate updates to safeguard their environments. For further details, refer to the Oracle security advisory.

References