CVE-2023-22040: Medium severity oracle weblogic server vulnerability
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H).
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-22040.
What is the affected software?
The affected software is Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0.
How severe is the vulnerability?
The vulnerability has a severity rating of 6.5 (medium).
How can this vulnerability be exploited?
The vulnerability can be exploited by a high privileged attacker with network access via multiple protocols.
Is there a fix available for this vulnerability?
Yes, Oracle has released a security update to address this vulnerability. Please refer to the Oracle Security Advisory for more information.