Kwetsbaarheden verholpen in Oracle Fusion Middleware

Oracle has patched multiple vulnerabilities across several Fusion Middleware products including WebLogic Server, SOA Suite, Data Integrator, Identity Manager, Access Manager, WebCenter Content, Helidon, and HTTP Server. Vulnerabilities include unsafe deserialization, insufficient authentication and access controls, flaws in network protocols (HTTP, HTTP/2, SOAP, T3, IIOP, LDAP), and cryptographic library issues in Bouncy Castle and Jackson-databind. Attackers can exploit these to achieve arbitrary code execution, full system compromise, unauthorized data access, data manipulation, denial-of-service, privilege escalation, cross-site scripting, and spoofing. Exploitation is possible via network access, often without authentication, with some cases requiring user interaction. CVSS scores reach up to 10.0, indicating maximum severity. No proof-of-concept code is currently known, but NCSC anticipates increased scanning and exploitation activity due to the wide deployment of these products.