CVE-2022-21564: 
Oracle WebLogic Server vulnerability analysis and mitigation

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server (Oracle CPU Jul 2022).

The vulnerability has a CVSS 3.1 Base Score of 5.3 (Availability impacts) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. The vulnerability affects the Web Services component and can be exploited through T3 and IIOP protocols. The attack complexity is considered Low, requires no privileges, and no user interaction (Oracle CPU Jul 2022).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. The impact is limited to availability with no direct effects on confidentiality or integrity (Oracle CPU Jul 2022).

The vulnerability is easily exploitable by an unauthenticated attacker with network access via T3 or IIOP protocols. No special privileges or user interaction is required to exploit this vulnerability (Oracle CPU Jul 2022).

Oracle has released patches for the affected versions (12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0) as part of the July 2022 Critical Patch Update. Oracle strongly recommends that customers apply the Critical Patch Update security patches as soon as possible (Oracle CPU Jul 2022).