Oracle Weblogic Server Proxy Plug-in vulnerabilities

Vulnerability in Oracle Weblogic Server Proxy Plug-in (component WebLogic Server Proxy Plug-In for Third-Party Web Servers) affecting versions 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to create, delete or modify data and access critical data, and attacks may impact additional products (scope change).

Vulnerability in Oracle Weblogic Server Proxy Plug-in (WebLogic Server Proxy Plug-In for Third-Party Web Servers component) affecting versions 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. A difficult-to-exploit flaw allows an unauthenticated attacker with HTTP network access to create, delete or modify critical data and gain full access to it, with impact potentially extending beyond this product.

Vulnerability in Oracle Weblogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Affects version 15.1.1.0.0. An unauthenticated attacker via HTTP can access and modify critical data, potentially affecting other products.