CVE-2023-22089 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2023-22089

Analyzed

More Info Official Page

Source-secalert_us@oracle.com

Published At-17 Oct, 2023 | 22:15

Updated At-23 Oct, 2023 | 18:19

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CPE Matches

Oracle Corporation

>>weblogic_server>>12.2.1.4.0

cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*

Oracle Corporation

>>weblogic_server>>14.1.1.0.0

cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.oracle.com/security-alerts/cpuoct2023.html	secalert_us@oracle.com	Patch Vendor Advisory

Hyperlink: https://www.oracle.com/security-alerts/cpuoct2023.html

Source: secalert_us@oracle.com

Resource:

Patch

Vendor Advisory