{"id":"CVE-2021-2394","published":"2021-07-20T22:44:08Z","modified":"2024-09-26T14:01:27Z","title":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)","vendor":"Oracle Corporation","product":"WebLogic Server","tier":"core","eol":null,"affectedVersions":[{"vendor":"Oracle Corporation","product":"WebLogic Server","versions":["10.3.6.0.0","12.1.3.0.0","12.2.1.3.0","12.2.1.4.0","14.1.1.0.0"]}],"description":{"text":"Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","provenance":"source","from":"CVE.org"},"summary":{"text":"A flaw in the Core component of Oracle WebLogic Server, part of Oracle Fusion Middleware, affects supported versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker with network access via the T3 or IIOP protocols can easily exploit it to take over the WebLogic Server.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:12:20Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.76381,"percentile":0.9954,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":null,"cwes":[],"references":[{"url":"https://www.oracle.com/security-alerts/cpujul2021.html","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2021-16853","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-16853","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":3,"skipped":1,"earliest":"2021-08-02","earliestUrl":"https://github.com/lz2y/CVE-2021-2394","repos":[{"name":"lz2y/CVE-2021-2394","url":"https://github.com/lz2y/CVE-2021-2394","stars":40,"created":"2021-08-02"},{"name":"freeide/CVE-2021-2394","url":"https://github.com/freeide/CVE-2021-2394","stars":20,"created":"2021-08-02"},{"name":"BabyTeam1024/CVE-2021-2394","url":"https://github.com/BabyTeam1024/CVE-2021-2394","stars":9,"created":"2021-08-08"}]},"first":{"date":"2021-08-02","source":"PoC-in-GitHub","url":"https://github.com/lz2y/CVE-2021-2394"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-07-20","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-2394","provenance":"source"},{"date":"2021-08-02","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/lz2y/CVE-2021-2394","provenance":"source"}],"speed":{"daysToPublicExploit":13,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":31.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.91,"detail":"percentile 0.9954"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"3 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}