CVE-2022-21386

CVE-2022-21386 affects Oracle WebLogic Server (Web Container) on 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server, with potential unauthorized update/insert/delete and read access to ...

CVE-2022-21386

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2022-21371

CVE-2022-21371 affects Oracle WebLogic Server (Web Container). Affected versions are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The issue is an easily exploitable vulnerability that, with network access over HTTP, can be triggered by an unauthenticated attacker to gain unauthorized access...

CVE-2022-21371

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2022-21361

CVE-2022-21361 affects Oracle WebLogic Server (Sample apps component) in Oracle Fusion Middleware. Affected: 12.2.1.4.0 and 14.1.1.0.0. Vulnerability allows unauthenticated, network-accessible (via HTTP) compromise of WebLogic Server; exploitation requires user interaction per the description. Im...

CVE-2022-21361

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic...

CVE-2022-21353

CVE-2022-21353 affects Oracle WebLogic Server (Core) with affected versions 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker can exploit over the network via T3 to modify or delete data and cause a partial denial of service. The vulnerability is described with a CVSS v3.1 base s...

CVE-2022-21353

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogi...

CVE-2022-21350

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2022-21350

CVE-2022-21350 affects Oracle WebLogic Server (Core) with impacted versions 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The Red Hat advisory confirms the same WebLogic Core vulnerability and the CVSS 3.1 base score of 6.5 (I = LOW, A = LOW) with network access via T3. An optional PoC explo...

CVE-2022-21347

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

CVE-2022-21347

The CVE-2022-21347 issue affects Oracle WebLogic Server (Core) in Fusion Middleware; affected versions are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated network access via T3 to compromise WebLogic Server, enabling unauthorized updates, inserts or del...

CVE-2022-21346

This CVE affects Oracle BI Publisher (BI Publisher Security) within Oracle Fusion Middleware. Affected versions include 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0. The issue is exploitable by an unauthenticated attacker over HTTP, potentially leading to unauthorized access to data across Oracle BI Pub...

CVE-2022-21346

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2022-21346

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: BI Publisher Security. Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2022-21306

CVE-2022-21306 affects Oracle WebLogic Server (Core component) across 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated, network-accessible attackers to compromise WebLogic via T3, potentially taking over the server (CVSS‑3.1 base 9.8). Connected sources ...

CVE-2022-21292

CVE-2022-21292 affects Oracle WebLogic Server (Fusion Middleware) – specifically the Samples component. Vulnerable versions: 12.2.1.4.0 and 14.1.1.0.0. The issue is an input validation error in the Samples module, enabling an unauthenticated attacker to access the server over HTTP and potentially...

CVE-2022-21262

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Samples. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

CVE-2022-21262

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Samples. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

CVE-2022-21262

CVE-2022-21262 affects Oracle WebLogic Server (Fusion Middleware) — specifically the samples component. Affected versions are 12.2.1.4.0 and 14.1.1.0.0. The issue allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server, with the attack requiring human interac...