VDB
OSA-38420944
OSA-38420944
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars (Apache Commons Lang)). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server.
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle | Oracle Retail Assortment Planning Version 16.0 | Oracle Retail Assortment Planning Version 16.0 |
| Oracle | Oracle GoldenGate Big Data and Application Adapters Version 23.4-23.10 | Oracle GoldenGate Big Data and Application Adapters Version 23.4-23.10 |
| Oracle | Oracle Application Development Framework (ADF) Version 14.1.2.0.0 | Oracle Application Development Framework (ADF) Version 14.1.2.0.0 |
| Oracle | Oracle Web Services Manager Version 12.2.1.4.0 | Oracle Web Services Manager Version 12.2.1.4.0 |
| Oracle | Oracle Retail Assortment Planning Version 15.0 | Oracle Retail Assortment Planning Version 15.0 |
| Oracle | Oracle Utilities Testing Accelerator Version 7.0.0.1.5 | Oracle Utilities Testing Accelerator Version 7.0.0.1.5 |
| Oracle | Oracle Financial Services Lending and Leasing Version 14.10.0.0.0-14.12.0.0.0 | Oracle Financial Services Lending and Leasing Version 14.10.0.0.0-14.12.0.0.0 |
| Oracle | Siebel CRM Deployment Version 17.0-26.2 | Siebel CRM Deployment Version 17.0-26.2 |
| Oracle | Oracle Banking Virtual Account Management(Common Core) Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Virtual Account Management(Common Core) Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle WebLogic Server Version 14.1.1.0.0 | Oracle WebLogic Server Version 14.1.1.0.0 |
| Oracle | JD Edwards EnterpriseOne Tools Version 9.2.0.0-9.2.26.1 | JD Edwards EnterpriseOne Tools Version 9.2.0.0-9.2.26.1 |
| Oracle | Oracle BI Publisher Version 8.2.0.0.0 | Oracle BI Publisher Version 8.2.0.0.0 |
| Oracle | Oracle Middleware Common Libraries and Tools Version 12.2.1.4.0 | Oracle Middleware Common Libraries and Tools Version 12.2.1.4.0 |
| Oracle | Oracle BI Publisher Version 7.6.0.0.0 | Oracle BI Publisher Version 7.6.0.0.0 |
| Oracle | Oracle Business Process Management Suite Version 14.1.2.0.0 | Oracle Business Process Management Suite Version 14.1.2.0.0 |
| Oracle | Oracle Web Services Manager Version 14.1.2.0.0 | Oracle Web Services Manager Version 14.1.2.0.0 |
| Oracle | Oracle Retail Warehouse Management System Version 16.0 | Oracle Retail Warehouse Management System Version 16.0 |
| Oracle | Oracle Banking Virtual Account Management(Platform) Version 14.5.0.0.0-14.8.0.0.0 | Oracle Banking Virtual Account Management(Platform) Version 14.5.0.0.0-14.8.0.0.0 |
| Oracle | Oracle WebLogic Server Version 12.2.1.4.0 | Oracle WebLogic Server Version 12.2.1.4.0 |
| Oracle | Oracle Utilities Testing Accelerator Version 25.4.0.0.2 | Oracle Utilities Testing Accelerator Version 25.4.0.0.2 |
…and 6 more
Timeline
- Apr 24, 2026 CVE Published