CVE-2023-22031

2023-07-1821:15:13

[email protected]

web.nvd.nist.gov

cve-2023-22031

oracle

weblogic server

fusion middleware

vulnerability

dos

cvss 3.1

4.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

Affected configurations

Vulners

NVD

Node

oracleweblogic_serverRange≤14.1.1.0.0

oracleweblogic_serverRange≤12.2.1.4.0

VendorProductVersionCPE
oracleweblogic_server*cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*
oracleweblogic_server*cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	weblogic_server	*	cpe:2.3:a:oracle:weblogic_server::::::::
oracle	weblogic_server	*	cpe:2.3:a:oracle:weblogic_server::::::::

CNA Affected

[
  {
    "vendor": "Oracle Corporation",
    "product": "WebLogic Server",
    "versions": [
      {
        "version": "14.1.1.0.0",
        "status": "affected"
      },
      {
        "version": "12.2.1.4.0",
        "status": "affected"
      }
    ]
  }
]