Listen to this Post
How the CVE Works
CVE-2025-50072 is a vulnerability in Oracle WebLogic Server’s Core component, affecting versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. An unauthenticated attacker with local network access can exploit this flaw to manipulate Oracle WebLogic Server’s data, leading to unauthorized insertions, updates, or deletions. The attack leverages improper access controls, allowing low-privileged users to bypass restrictions. The CVSS 3.1 score of 4.0 reflects its limited integrity impact (I:L) due to the attacker needing local access (AV:L) and no user interaction (UI:N).
DailyCVE Form
Platform: Oracle WebLogic
Version: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0
Vulnerability: Unauthorized data modification
Severity: Medium
Date: 07/24/2025
Prediction: Patch by 08/15/2025
What Undercode Say
nmap -p 7001 <target_IP> curl -X POST http://<target_IP>:7001/vulnerable_endpoint grep -r "weblogic.core" /opt/oracle/
How Exploit
1. Gain local network access.
2. Send crafted requests to WebLogic Core.
3. Bypass access checks.
4. Modify server data.
Protection from this CVE
1. Apply Oracle patches.
2. Restrict local access.
3. Monitor logs.
Impact
Unauthorized data alteration.
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
