Tr1Ple

The issue is related to errors in handling input data in the Core component of the Oracle WebLogic Server. It allows an unauthenticated attacker with network access via T3 to compromise the server. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data on the Oracle WebLogic Server.

A JNDI rebind operation in the default ORB listener allows remote attackers to load malicious code on the server once a JNDI directory scan is performed, specifically when Java 1.8u181 and earlier is used.