CVE-2021-2064 in WebLogic ServerИнформация

Сводка

по MITRE • 20.01.2021

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). The supported version that is affected is 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Ответственный

Oracle

Резервировать

09.12.2020

Раскрытие

20.01.2021

Модерация

принято

Вход

VDB-168288

EPSS

0.03728

KEV

Нет

Деятельности

Очень низкий

Источники

Do you want to use VulDB in your project?

Use the official API to access entries easily!