CVE-2021-2394

CRITICAL

Oracle WebLogic Server <14.1.1.0.0 - RCE

Title source: llm

Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Exploits (4)

nomisec WORKING POC 40 stars
by lz2y · poc
https://github.com/lz2y/CVE-2021-2394
nomisec WORKING POC 21 stars
by freeide · poc
https://github.com/freeide/CVE-2021-2394
nomisec WORKING POC 9 stars
by BabyTeam1024 · poc
https://github.com/BabyTeam1024/CVE-2021-2394
nomisec NO CODE
by fasanhlieu · poc
https://github.com/fasanhlieu/CVE-2021-2394

References (1)

Scores

CVSS v3 9.8
EPSS 0.9023
EPSS Percentile 99.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (5)
oracle/weblogic_server 10.3.6.0.0
oracle/weblogic_server 12.1.3.0.0
oracle/weblogic_server 12.2.1.3.0
oracle/weblogic_server 12.2.1.4.0
oracle/weblogic_server 14.1.1.0.0
Published Jul 21, 2021
Tracked Since Feb 18, 2026