CVE-2024-20986

Summary

CVE-2024-20986 is a vulnerability affecting Oracle WebLogic Server, specifically versions 12.2.1.4.0 and 14.1.1.0.0, within Oracle Fusion Middleware. This issue is classified as easily exploitable and allows unauthenticated attackers, with network access via HTTP, to compromise the server. Successful attacks require human interaction and may cause significant impact on additional products. Consequences of successful exploitation include unauthorized update, insert, or delete access to some data, as well as unauthorized read access to a subset of data. The vulnerability has a CVSS Base Score of 6.1 for Confidentiality and Integrity impacts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.