Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

0Xrumbe

Researcher fromThreatBook Labs
#19909of 60,387
15.6Total CVSS
Vulnerabilities · 2
High
2
PT-2023-2385
2023-04-18
7.8
CVE-2023-21931
Oracle
Oracle Weblogic Server
The issue is related to errors in handling input data in the Core component of the Oracle WebLogic Server. It allows an unauthenticated attacker with network access via T3 to compromise the server. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data on the Oracle WebLogic Server.
PT-2023-1295
2023-01-17
7.8
CVE-2023-21839
Oracle
Oracle Weblogic Server
The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via T3, IIOP to compromise the server. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. It is estimated that millions of servers worldwide are affected, with 166,000 in Brazil alone.