Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ja00See

#32264of 53,635
7.8Total CVSS
Vulnerabilities · 1
PT-2023-9637
7.8
2023-12-07
Oracle · Oracle Weblogic Server · CVE-2024-21183
**Name of the Vulnerable Software and Affected Versions** Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 **Description** The issue is related to insufficient protection of internal data in the Oracle WebLogic Server Core component. This can be exploited by a remote attacker to gain unauthorized access to protected information using T3/IIOP protocols. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data on the Oracle WebLogic Server. **Recommendations** For versions 12.2.1.4.0 and 14.1.1.0.0, update to a version that includes the fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the T3 and IIOP protocols until a patch is available.