CVE-2023-21839 — Oracle WebLogic Server Unspecified Vulnerability
CVE-2023-21839: Oracle WebLogic Server Unspecified Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Oracle |
| Product | WebLogic Server |
| Date added | 2023-05-01 |
| Due date | 2023-05-22 |
| Ransomware campaign use | Unknown |
Description
Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://www.oracle.com/security-alerts/cpujan2023.html; https://nvd.nist.gov/vuln/detail/CVE-2023-21839
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-21839
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog