Oracle · Oracle Weblogic Server · CVE-2024-21183
**Name of the Vulnerable Software and Affected Versions**
Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0
**Description**
The issue is related to insufficient protection of internal data in the Oracle WebLogic Server Core component. This can be exploited by a remote attacker to gain unauthorized access to protected information using T3/IIOP protocols. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data on the Oracle WebLogic Server.
**Recommendations**
For versions 12.2.1.4.0 and 14.1.1.0.0, update to a version that includes the fix for this issue to prevent exploitation.
As a temporary workaround, consider restricting access to the T3 and IIOP protocols until a patch is available.