CVE-2023-21839 - Oracle WebLogic Server Unspecified Vulnerability

Oracle | WebLogic Server

• Date Added:
• 2023-05-01

• Due Date:
• 2023-05-22

Vulnerability Name

Oracle WebLogic Server Unspecified Vulnerability

Description

Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://www.oracle.com/security-alerts/cpujan2023.html; https://nvd.nist.gov/vuln/detail/CVE-2023-21839

Related News Articles

8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency MiningJune 28, 2024