Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-08436
HistoryFeb 09, 2023 - 12:00 a.m.

Oracle WebLogic Server Information Disclosure Vulnerability (CNVD-2023-08436)

2023-02-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
22

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production, and simplifies application deployment and management. 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0 contain a security vulnerability that could be exploited by an attacker to cause unauthorized access to critical data or full access to all Oracle WebLogic Server-accessible data.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Related for CNVD-2023-08436