Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Hosch3N

Pesquisador deMoreSec Zhuri Lab
#23065de 53,634
10CVSS total
Vulnerabilidades · 1
PT-2023-6206
10
2023-10-17
Oracle · Oracle Weblogic Server · CVE-2023-22072
**Name of the Vulnerable Software and Affected Versions** Oracle WebLogic Server version 12.2.1.3.0 **Description** The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via T3, IIOP to compromise the server. Successful attacks can result in the takeover of Oracle WebLogic Server. Approximately 2,973,453 devices may be affected. **Recommendations** For version 12.2.1.3.0, consider disabling access via T3, IIOP until a patch is available. As a temporary workaround, restrict network access to the Oracle WebLogic Server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.