Executive Summary

This vulnerability exists in the WebLogic Server product of Oracle Fusion Middleware, specifically in the Console component. It affects supported versions 14.1.2.0.0 and 15.1.1.0.0. The vulnerability is easily exploitable by a low privileged attacker who has logon access to the infrastructure where WebLogic Server runs. However, successful exploitation requires human interaction from someone other than the attacker. Although the vulnerability is within WebLogic Server, attacks may impact additional products due to scope change.

Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or any data accessible by WebLogic Server. It can also result in unauthorized access to critical or all accessible data within WebLogic Server.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have serious impacts including unauthorized creation, deletion, or modification of critical data within WebLogic Server. It can also lead to unauthorized access to critical or all data accessible by the server. Because the vulnerability requires low privileges but human interaction, it can be exploited to compromise the integrity and confidentiality of your data and systems running WebLogic Server.

Useful 0 Not Useful 0