CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2024-211827.5/HIGHEPSS 74.2%CISA KEV

2024-07-16

Oracle WebLogic Server T3/IIOP Protocol Information Disclosure Vulnerability Advisory (CVE-2024-21182)

[Affected Scope] Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0.

[Impact] Unauthenticated remote attackers can exploit this vulnerability via T3 or IIOP protocols to gain unauthorized access to critical data or compromise all accessible data.

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict/disable T3 and IIOP protocols if they are not required.

oracle-weblogic t3-protocol iiop-protocol information-disclosure cve-2024-21182 kev-listed

Full Advisory & Mitigation

CVE-2020-146449.8/CRITICALEPSS 94.5%CISA KEV

2020-07-15

Oracle WebLogic Server T3/IIOP Protocol Remote Code Execution (RCE) Vulnerability (CVE-2020-14644) Analysis and Mitigation Guide

[Affected Scope] Oracle WebLogic Server versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0

[Impact] Unauthenticated remote attackers can exploit T3 or IIOP protocols to achieve complete takeover and execute arbitrary code on the target server

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) or restrict/block T3 and IIOP protocol access using connection filters

oracle-weblogic rce t3-protocol iiop-protocol cve-2020-14644 deserialization

Full Advisory & Mitigation