Oracle WebLogic Server OS Command Injection Vulnerability
Oracle · WebLogic Server
Date added (CISA)
2024-06-03
Remediation due
2024-06-24
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document.