Patchfirst
Patchfirst
CVE-2024-20931 Public exploit High · 7.5 EPSS 59.7%

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)

Oracle Corporation · WebLogic Server

Summary

A flaw in the Core component of Oracle WebLogic Server, part of Oracle Fusion Middleware, lets an unauthenticated attacker compromise the server. The attack is reached over the network through the T3 and IIOP protocols, requires no user interaction, and can expose critical data or all data accessible to the server.

Official description · CVE.org

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Breakdown
31.7 / 100
Exploited
Not confirmed
Reports
0
Tactics
0/15

Public exploit code (PoC-in-GitHub) was available 15 days before disclosure.

  1. Public exploit codePoC-in-GitHub15 days before
  2. Disclosedday 0

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

Also mentioned in 4 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

1 link, grouped by NVD tag

vendor-advisory 1

oracle.com/security-alerts/cpujan2024.html
↑ ↓ chooseEnter openEsc close