CVE-2024-20931

CWE-284 — Improper Access Control5 documents5 sources

Severity

7.5HIGH

EPSS

89.1%

top 0.47%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Corporation Weblogic Server Oracle Weblogic Server

Timeline

PublishedFeb 17

Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentialit…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶NVDoracle/weblogic_server12.2.1.4.0, 14.1.1.0.0+1

▶CVEListV5oracle_corporation/weblogic_server12.2.1.4.0, 14.1.1.0.0+1

🔴Vulnerability Details

GHSA

GHSA-w2f4-229h-cwc2: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)↗2024-02-17

▶

CVEList

CVE-2024-20931: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)↗2024-02-17

▶

🔍Detection Rules

Suricata

ET WEB_SPECIFIC_APPS Possible Oracle Weblogic IIOP/T3 JNDI Injection Attack (CVE-2024-20931)↗2024-02-12

▶

📋Vendor Advisories

Oracle

Oracle Oracle Fusion Middleware Risk Matrix: Core — CVE-2024-20931↗2024-01-15

▶