Voidfyoo

The issue is related to a vulnerability in the Oracle WebLogic Server product, specifically in the Console component. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Oracle WebLogic Server, potentially resulting in a takeover. The vulnerability is easily exploitable and can impact the confidentiality, integrity, and availability of the server. It is associated with errors in code generation management and can be exploited using HTTP requests.

A vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console) allows an unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. The flaw is under active attack, and researchers warn that it has been exploited in real-world incidents. The vulnerability can be exploited using a single GET request.

The issue is related to insufficient input validation in the Console component of Oracle WebLogic Server, allowing a remote attacker to gain full control over the application via the HTTP protocol. The 8220 Gang has been observed exploiting this flaw to spread malware, including infostealers and cryptominers, in various sectors such as healthcare, telecom, and finance. Successful attacks can result in the takeover of Oracle WebLogic Server.