Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-08438
HistoryFeb 09, 2023 - 12:00 a.m.

Oracle WebLogic Server Information Disclosure Vulnerability (CNVD-2023-08438)

2023-02-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Oracle WebLogic Server is an application services middleware for cloud and traditional environments from Oracle Corporation (USA) that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and management.Oracle WebLogic Server is vulnerable to A security vulnerability exists in Oracle WebLogic Server that could be exploited by an attacker to cause unauthorized access to critical data or full access to all Oracle WebLogic Server-accessible data.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Related for CNVD-2023-08438