The flaw resides in the Oracle Weblogic Server Proxy Plug‑in and permits an unauthenticated attacker with network access over HTTP to create, delete, or modify any data that the plug‑in can access, or to read critical information. Because the vulnerability bypasses all authentication controls, an attacker can achieve full data compromise within the affected component. The weakness aligns with improper access control and authentication failures and can lead to confidentiality and integrity violations.

Affected products include the Oracle Weblogic Server Proxy Plug‑in for versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0, all of which are part of the Oracle Fusion Middleware stack. These are identified by their CPE strings derived from the vendor names. No other products outside this plug‑in domain are directly impacted, although the write‑ups indicate that a successful compromise could affect other Weblogic Server components due to a scope change.

The CVSS 3.1 base score is 8.7, reflecting high confidentiality and integrity impact while the attack vector is network‑based and requires no user interaction. The EPSS score is unavailable and the vulnerability is not listed in the CISA KEV catalog, but the scope change (S:C) indicates that exploitation can affect components beyond the immediate target, raising overall risk. Because the exploit is remote and unauthenticated, the likelihood of attack is significant in environments where the plug‑in is exposed to untrusted traffic.