Unauthenticated Hang or DOS Vulnerability in Oracle WebLogic Server

CVE-2024-21260

Summary

A vulnerability exists in the Oracle WebLogic Server as part of Oracle Fusion Middleware, specifically within the Core component. Affected versions include 12.2.1.4.0 and 14.1.1.0.0. This vulnerability can be easily exploited by unauthenticated attackers who gain network access through T3 or IIOP protocols, potentially leading to a denial of service condition. Successful exploitation allows these attackers to cause the WebLogic Server to hang or crash, effectively interrupting service and impacting availability. Organizations using the affected versions are advised to assess their exposure and apply available patches.

References