Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Oracle WebLogic Server — oracle.com/security-alerts/cpuoct2024.html Clear all filters
TI-2024-14049 CVE-2024-21274 · GHSA-6qgf-rh7g-g5v9

Buffer overflow in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00653 Published 2024-10-15 No fix listed CWE-120
TI-2024-14035 CVE-2024-21260 · GHSA-62xv-gxq8-gpgw

Incorrect authorization in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00711 Published 2024-10-15 No fix listed CWE-863
TI-2024-14011 CVE-2024-21234 · GHSA-c949-x39f-qgxh

Missing authorization in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00692 Published 2024-10-15 No fix listed CWE-862
TI-2024-14003 CVE-2024-21216 · GHSA-r389-865g-hcg3

Missing authorization in Oracle WebLogic Server

Priority MEDIUM 50

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0071 Published 2024-10-15 No fix listed CWE-862
TI-2024-14002 CVE-2024-21215 · GHSA-xfqq-7659-m6jq

Missing authorization in Oracle WebLogic Server

Priority MEDIUM 40

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00646 Published 2024-10-15 No fix listed CWE-862