CVE-2021-2403: 
Oracle WebLogic Server vulnerability analysis and mitigation

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core) affects versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. This easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server (Oracle Advisory, NVD).

The vulnerability has been assigned a CVSS Base Score of 5.3 (Confidentiality impacts) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. The scoring indicates that the vulnerability is network-accessible (AV:N), requires low attack complexity (AC:L), needs no privileges (PR:N), requires no user interaction (UI:N), has unchanged scope (S:U), and can result in low confidentiality impact (C:L) with no impact on integrity (I:N) or availability (A:N) (Oracle Advisory).

Successful exploitation of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data (Oracle Advisory, NVD).

Oracle has released security patches for this vulnerability as part of their July 2021 Critical Patch Update. Organizations running affected versions of WebLogic Server should apply the available security patches immediately (Oracle Advisory).