CVE-2018-3252: Critical severity oracle weblogic server vulnerability

Published Oct 17, 2018

Updated

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected Software

3 affected components

ORACLE WebLogic Server=10.3.6.0.0

ORACLE WebLogic Server=12.1.3.0.0

ORACLE WebLogic Server=12.2.1.3.0

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html

Event History

Oct 17, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-3252?

CVE-2018-3252 is considered to have a high severity due to its potential for exploit by unauthenticated attackers.

How do I fix CVE-2018-3252?

To fix CVE-2018-3252, users should apply the latest security patches provided by Oracle for the affected WebLogic Server versions.

Which versions of WebLogic Server are affected by CVE-2018-3252?

CVE-2018-3252 affects Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, and 12.2.1.3.

What type of attack can exploit CVE-2018-3252?

CVE-2018-3252 can be exploited through an unauthenticated network access attack via T3 protocol.

Is there a workaround for CVE-2018-3252?

Temporary workarounds for CVE-2018-3252 may involve restricting access to the WebLogic Server from untrusted networks.