May 1, 2023 · Applied Cybernetics Group
CVE-2023-21839 — Oracle WebLogic Server
Oracle WebLogic Server Unspecified Vulnerability
- Added to KEV
2023-05-01- Federal due date
2023-05-22- Vendor
- Oracle
- Product
- WebLogic Server
- EPSS
- 99.9th percentile (score 0.942, as of
2026-06-08) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2023-21839
CISA short description
Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server.
Required action
Apply updates per vendor instructions.