vulnerability

Oracle WebLogic: CVE-2023-44487 : Critical Patch Update

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
8	(AV:N/AC:L/Au:N/C:N/I:N/A:C)	10/10/2023	04/25/2024	01/28/2025

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:C)

Published

10/10/2023

Added

04/25/2024

Modified

01/28/2025

Description

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Solution

oracle-weblogic-apr-2024-cpu-14_1_1_0_0

References

CVE-2023-44487
https://attackerkb.com/topics/CVE-2023-44487
URL-http://www.oracle.com/security-alerts/cpuapr2024.html
URL-https://support.oracle.com/rs?type=doc&id=3011291.2

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today