CVE-2021-2108: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). The supported version that is affected is…

PriorityP264critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

3.73%

88.6th percentile

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). The supported version that is affected is 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected

2 ranges

Vendor	Product	Version range	Fixed in
oracle	weblogic_server	—	—
oracle_corporation	weblogic_server	—	—

Detection & IOCsextracted from sources · hover to see the quote

→Monitor for exploitation attempts over IIOP and T3 protocols targeting Oracle WebLogic Server 12.1.3.0.0, as these are the attack vectors for CVE-2021-2108 ↗
→Alert on unauthenticated remote connections to WebLogic T3/IIOP listener ports from external/untrusted networks, as no authentication is required to exploit this vulnerability ↗

·Only Oracle WebLogic Server version 12.1.3.0.0 is listed as the affected supported version for this CVE; other versions are not confirmed affected by this advisory ↗
·Both IIOP and T3 protocols are attack vectors; blocking or restricting both protocols at the network perimeter is relevant to reducing exposure ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

vendor_oracle9.8CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.