Description
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Oracle | WebLogic Server | 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Oracle WebLogic Server 14.1.1.0.0 - Local File Inclusion EDB-50688 · remote · Jan 27, 2022
GitHub 3 repositories
-
Mr-xn/CVE-2022-21371 ★ 26 · Jan 25, 2022
Oracle WebLogic Server 12.1.3.0.0 / 12.2.1.3.0 / 12.2.1.4.0 / 14.1.1.0.0 Local File Inclusion
-
Vulnmachines/Oracle-WebLogic-CVE-2022-21371 ★ 18 · Aug 25, 2022
Oracle WebLogic CVE-2022-21371
-
Cappricio-Securities/CVE-2022-21371 ★ 1 · Jun 5, 2024
Oracle WebLogic Server (LFI)
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Oracle WebLogic Server Local File Inclusion http/cves/2022/CVE-2022-21371.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.