Oracle WebLogic Server Vulnerability in Oracle Fusion Middleware Core Component

CVE-2024-21215

Summary

Oracle WebLogic Server, a critical component of Oracle Fusion Middleware, has been identified with a vulnerability that can be exploited by an unauthenticated attacker with network access using HTTP. This flaw affects versions 12.2.1.4.0 and 14.1.1.0.0, enabling malicious actors to compromise the server and potentially lead to denial-of-service conditions. Successful exploitation of this vulnerability could cause the server to hang or crash repeatedly, resulting in significant availability impacts.

References