The vulnerability resides in the Core component of Oracle WebLogic Server. An attacker with network access to the HTTP interface can exploit the flaw to take complete control of the server, gaining full confidentiality, integrity, and availability impact. The flaw allows a high‑privileged attacker to compromise the entire WebLogic environment and potentially extend the attack to other products, as the scope in the CVSS vector changes from LOW to HIGH.

Affected versions are Oracle WebLogic Server 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. These versions are listed in the vendor’s advisory and are vulnerable to the described exploitation.

The CVSS 3.1 base score is 9.1, indicating critical severity. The EPSS score of less than 1% suggests that, while the flaw is easily exploitable, it is currently unlikely to be targeted. The vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is over the network via HTTP, as inferred from the description and CVSS vector; the attacker must have high privileges after exploitation, and no user interaction is required.