Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.oracle.com/security-alerts/cpuoct2023.html |
![]() ![]() |
History
Thu, 06 Mar 2025 16:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: oracle
Published:
Updated: 2025-03-06T16:11:00.729Z
Reserved: 2022-12-17T19:26:00.760Z
Link: CVE-2023-22089

Updated: 2024-08-02T09:59:28.853Z

Status : Modified
Published: 2023-10-17T22:15:14.150
Modified: 2024-11-21T07:44:15.310
Link: CVE-2023-22089

No data.