Description
Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| weblogic_server | oracle / weblogic_server | 12.2.1.3.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.4.0 | affected |
| weblogic_server | oracle / weblogic_server | 14.1.1.0.0 | affected |
| WebLogic Server | Oracle Corporation / WebLogic Server | 12.2.1.3.0 | affected |
| WebLogic Server | Oracle Corporation / WebLogic Server | 12.2.1.4.0 | affected |
| WebLogic Server | Oracle Corporation / WebLogic Server | 14.1.1.0.0 | affected |