Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-04389
HistoryJan 18, 2023 - 12:00 a.m.

Oracle WebLogic Server Remote Code Execution Vulnerability (CNVD-2023-04389)

2023-01-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
21

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and management.Oracle WebLogic Server is vulnerable to A remote code execution vulnerability can be exploited to send malicious requests to an affected server via the IIOP/T3 protocol, leading to access to sensitive information and execution of arbitrary code on the target server.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N