Weblogic
Monthly
Unauthenticated network attackers can read, create, delete, or modify critical data in Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 through the Core component's HTTP interface. The 9.1 CVSS score reflects high confidentiality and integrity impact with no availability impact, low complexity, and no user interaction. No public exploit identified at time of analysis, and no CISA KEV confirmation was provided; exposure is primarily determined by whether WebLogic HTTP/T3 listeners are reachable from untrusted networks.
Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 can expose critical server-accessible data to an unauthenticated remote attacker over HTTP, but Oracle rates the flaw difficult to exploit due to high attack complexity. No public exploit identified at time of analysis, no CISA KEV entry is present in the provided data, and no EPSS score was supplied. The CVSS 3.1 base score is 5.9, with confidentiality-only impact.
Unauthenticated network attackers can read, create, delete, or modify critical data in Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 through the Core component's HTTP interface. The 9.1 CVSS score reflects high confidentiality and integrity impact with no availability impact, low complexity, and no user interaction. No public exploit identified at time of analysis, and no CISA KEV confirmation was provided; exposure is primarily determined by whether WebLogic HTTP/T3 listeners are reachable from untrusted networks.
Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 can expose critical server-accessible data to an unauthenticated remote attacker over HTTP, but Oracle rates the flaw difficult to exploit due to high attack complexity. No public exploit identified at time of analysis, no CISA KEV entry is present in the provided data, and no EPSS score was supplied. The CVSS 3.1 base score is 5.9, with confidentiality-only impact.