CVE-2022-21560: 
Oracle WebLogic Server vulnerability analysis and mitigation

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). The vulnerability affects versions 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. This is an easily exploitable vulnerability that allows unauthenticated attackers with network access via T3, IIOP protocols to compromise Oracle WebLogic Server (Oracle CPU July 2022).

The vulnerability has been assigned a CVSS 3.1 Base Score of 5.3 (Availability impacts) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. The vulnerability requires no user privileges or interaction and can be exploited over the network. The attack complexity is considered low, indicating relatively straightforward exploitation methods (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. The impact is primarily focused on availability, with no direct impact on confidentiality or integrity of the system (Oracle CPU July 2022).

The vulnerability is considered easily exploitable by unauthenticated attackers with network access via T3 and IIOP protocols. No special conditions or user interaction is required for exploitation (Oracle CPU July 2022).

Oracle has released security patches to address this vulnerability as part of the July 2022 Critical Patch Update. Organizations running affected versions of WebLogic Server should apply these patches as soon as possible. The patches are available through Oracle's standard patching mechanisms (Oracle CPU July 2022).