Federico Dotta

A vulnerability exists in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). This vulnerability allows an unauthenticated attacker with network access via T3 or HTTP to compromise Oracle WebLogic Server, potentially leading to a takeover of the server.

The issue allows serialized objects from untrusted sources to run, causing the consumption of resources, which may lead to a denial of service.

The issue allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object. This is related to the JMX servlet in the affected software.

The issue allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.