{"id":"CVE-2024-20931","published":"2024-02-17T01:50:12Z","modified":"2025-03-28T23:10:13Z","title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)","vendor":"Oracle Corporation","product":"WebLogic Server","tier":"core","eol":null,"affectedVersions":[{"vendor":"Oracle Corporation","product":"WebLogic Server","versions":["12.2.1.4.0","14.1.1.0.0"]}],"description":{"text":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).","provenance":"source","from":"CVE.org"},"summary":{"text":"A flaw in the Core component of Oracle WebLogic Server, part of Oracle Fusion Middleware, lets an unauthenticated attacker compromise the server. The attack is reached over the network through the T3 and IIOP protocols, requires no user interaction, and can expose critical data or all data accessible to the server.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:25Z"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.59679,"percentile":0.99125,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":4,"pulses":[{"name":"Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos","url":"https://otx.alienvault.com/pulse/69bf64eccb5d39a90a3c391e","created":"2026-03-22"},{"name":"Spam “Broken Seal” DocuSign-themed Delivery w/Fileless Process Hollowing (Zeppelin/Bloat-A) by msudosos","url":"https://otx.alienvault.com/pulse/69bf64e1d5e06aa6207f78de","created":"2026-03-22"},{"name":"“Broken Seal” DocuSign-themed Delivery with Fileless Process Hollowing (Zeppelin/Bloat-A)","url":"https://otx.alienvault.com/pulse/698e93e1ab02db8c49e8c3ed","created":"2026-02-13"},{"name":"ACTUALIZACION | Oracle Critical Patch Update Advisory - January 2024","url":"https://otx.alienvault.com/pulse/65c0fd55c5d3c780a06aa227","created":"2024-02-05"}],"provenance":"machine"},"cwes":[{"id":"CWE-284","name":"Improper Access Control"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpujan2024.html","tags":["vendor-advisory"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-18645","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-18645","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":4,"skipped":0,"earliest":"2024-02-02","earliestUrl":"https://github.com/GlassyAmadeus/CVE-2024-20931","repos":[{"name":"GlassyAmadeus/CVE-2024-20931","url":"https://github.com/GlassyAmadeus/CVE-2024-20931","stars":74,"created":"2024-02-02"},{"name":"dinosn/CVE-2024-20931","url":"https://github.com/dinosn/CVE-2024-20931","stars":61,"created":"2024-02-06"},{"name":"Leocodefocus/CVE-2024-20931-Poc","url":"https://github.com/Leocodefocus/CVE-2024-20931-Poc","stars":1,"created":"2024-02-06"},{"name":"ATonysan/CVE-2024-20931_weblogic","url":"https://github.com/ATonysan/CVE-2024-20931_weblogic","stars":1,"created":"2024-02-06"}]},"first":{"date":"2024-02-02","source":"PoC-in-GitHub","url":"https://github.com/GlassyAmadeus/CVE-2024-20931"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-02-02","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/GlassyAmadeus/CVE-2024-20931","provenance":"source"},{"date":"2024-02-17","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-20931","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":31.7,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.82,"detail":"percentile 0.9912"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"4 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":1.59,"detail":"4 pulses"},{"name":"CVSS severity","points":5.25,"detail":"base score 7.5"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}