Venustech Adlab

The issue exists due to insufficient input validation in the Coherence Container component of Oracle WebLogic Server, allowing a remote attacker to compromise the server's confidentiality, integrity, and availability via T3 and IIOP protocols. Successful attacks can result in the takeover of Oracle WebLogic Server.

The issue is related to insufficient input validation in the User Interface component of Oracle Advanced Outbound Telephony. This allows a low-privileged attacker with network access via HTTP to compromise Oracle Advanced Outbound Telephony, potentially leading to unauthorized access to critical data or complete access to all Oracle Advanced Outbound Telephony accessible data. Successful attacks can also result in unauthorized update, insert, or delete access to some of Oracle Advanced Outbound Telephony accessible data.

The issue is related to insufficient access control in the WLS Web Services component of Oracle WebLogic Server, allowing a high-privileged attacker with network access via IIOP, T3 protocols to compromise the server. Successful attacks can result in the takeover of Oracle WebLogic Server.

The issue is related to insufficient access control in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP and T3 protocols to compromise the server and gain full control over it. Successful attacks can result in the takeover of Oracle WebLogic Server.

The issue is related to insufficient access control in the Web Services component of Oracle WebLogic Server, allowing a remote attacker to gain full control over the application using IIOP and T3 network protocols. Successful attacks can result in the takeover of Oracle WebLogic Server.