Critical Remotely Exploitable Oracle Weblogic Server Vulnerabilities

When it comes to developing enterprise-level web applications Oracle’s Weblogic Server is an industry-leading application server for developing business applications. This Weblogic Server uses Java Enterprise Edition standards for web app development. You can simply think of Oracle Weblogic Server as middleware because it interacts with users as well as the back-end database, aka bridge between users and database. But what’s more important is that recently Oracle detected some critical Weblogic Server Vulnerabilities that can be exploited remotely from anywhere around the globe.

Businesses using Oracle Weblogic Servers went very tensed as multiple flaws have been found in these Weblogic Servers. Let’s discuss this topic in more detail in today’s article.

 

How Did Oracle Detected Weblogic Server Vulnerabilities?

 

So on Tuesday Oracle released its Critical Patch Update for July 2021  and across multiple Oracle products a total of 342 vulnerabilities have been found. Though these flaws are not critical however, some of the found vulnerabilities have been reported to provide control over the affected system to attackers remotely.

 

Severe Vulnerabilities In Weblogic Server

 

However, one noticeable vulnerability is CVE-2019-2729. This is a decentralised remotely exploitable vulnerability that can give access to attackers without authentication.

 

Among the below-listed vulnerabilities, the CVE which scores CVSS 9.8 affects Weblogic Server versions 11.1.2.4 and 11.2.5.0.

 

 

 

 

 

 

 

So Oracle Weblogic Server customers are advised to update their systems to the newest possible version as soon as possible.

 

Also Read: Minor New Features in Windows 11 build 22000.71

Ethix

I'm a coding geek interested in cyberspace who loves to write and read

Leave a Reply

Your email address will not be published.