The vulnerability resides in the Console component of Oracle WebLogic Server and allows an unauthenticated attacker who can reach the server over HTTP to compromise the entire application. The flaw is easily exploitable and can lead to a full takeover, giving the attacker full control over confidentiality, integrity, and availability of the system. Attackers can gain unrestricted access to the WebLogic Server environment without any prior authentication or user interaction.

Oracle Corporation's WebLogic Server products are affected. The specific versions impacted are 14.1.2.0.0 and 15.1.1.0.0. Users running these releases should verify whether the WebLogic Console is publicly exposed, as that is the entry point for the exploit.

The CVSS 3.1 base score of 10.0 reflects a trivial attack complexity, no authentication, no user interaction, and a complete scope change. The EPSS score is below 1%, indicating that the probability of exploitation remains very low, but the potential impact is catastrophic. The vulnerability is not currently listed in the CISA KEV catalog. Because the flaw operates over a network-facing HTTP interface and requires no credentials, it is likely the most straightforward attack path for an adversary. Successful exploitation can result in arbitrary code execution and takeover of the targeted WebLogic Server.