CVE-2024-20927: High severity ORACLE WebLogic Server vulnerability
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 8.6 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20927?
CVE-2024-20927 is considered a high-severity vulnerability that allows unauthenticated attackers to compromise Oracle WebLogic Server.
Which versions are affected by CVE-2024-20927?
CVE-2024-20927 affects Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0.
How do I fix CVE-2024-20927?
To fix CVE-2024-20927, you should upgrade to the latest patched version of Oracle WebLogic Server.
Can an attacker exploit CVE-2024-20927 remotely?
Yes, CVE-2024-20927 can be easily exploited by an unauthenticated attacker with network access via HTTP.
What component of Oracle Fusion Middleware is impacted by CVE-2024-20927?
CVE-2024-20927 impacts the Core component of the Oracle WebLogic Server in Oracle Fusion Middleware.