vulnerability

Oracle WebLogic: CVE-2022-24409 : Critical Patch Update

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Feb 23, 2022
Added
Jul 19, 2023
Modified
Oct 16, 2025

Description

Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system. Only customers with active BSAFE maintenance contracts can receive details about this vulnerability. Public disclosure of the vulnerability details will be shared at a later date.

Solutions

oracle-weblogic-jul-2023-cpu-12_2_1_4_0oracle-weblogic-jul-2023-cpu-14_1_1_0_0
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.