Vulnerability DatabaseCVE-2021-2394

CVE-2021-2394:
Oracle WebLogic Server vulnerability analysis and mitigation

Overview

CVE-2021-2394 is a critical vulnerability in Oracle WebLogic Server's Core component, discovered and disclosed in July 2021. The vulnerability affects multiple versions including 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. This easily exploitable vulnerability allows unauthenticated attackers with network access via T3 or IIOP protocols to completely compromise Oracle WebLogic Server (Oracle Advisory).

Technical details

The vulnerability has been assigned a CVSS 3.1 Base Score of 9.8 (Critical) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating network accessibility, low attack complexity, no privileges required, and no user interaction needed. The vulnerability is accessible through IIOP, a protocol that WebLogic exposes to the internet by default on port 7001 (AttackerKB).

Impact

Successful exploitation of this vulnerability can result in complete takeover of Oracle WebLogic Server, potentially compromising the confidentiality, integrity, and availability of the system. The critical CVSS score of 9.8 indicates the severe potential impact on affected systems (NVD).

Mitigation and workarounds

Oracle has released security patches as part of the July 2021 Critical Patch Update to address this vulnerability. Organizations running affected versions of WebLogic Server should apply these security patches immediately to mitigate the risk (Oracle Advisory).