Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.oracle.com/security-alerts/cpuoct2023.html |
![]() ![]() |
History
Thu, 06 Mar 2025 16:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-306 | |
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: oracle
Published:
Updated: 2025-03-06T15:41:54.438Z
Reserved: 2022-12-17T19:26:00.757Z
Link: CVE-2023-22069

Updated: 2024-08-02T09:59:29.002Z

Status : Modified
Published: 2023-10-17T22:15:12.687
Modified: 2025-03-06T16:15:39.710
Link: CVE-2023-22069

No data.