CVE-2021-2064

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). The supported version that is affected is 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujan2021.htmlVendor Advisory

Published

Jan 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-20634Improper access control vulnerability in Custom App of Cyboz…4.3
• CVE-2021-20635Improper restriction of excessive authentication attempts in…6.5
• CVE-2021-20636Cross-site request forgery (CSRF) vulnerability in LOGITEC L…6.5
• CVE-2021-20637Improper check or handling of exceptional conditions in LOGI…6.5
• CVE-2021-20638LOGITEC LAN-W300N/PGRB allows an attacker with administrativ…6.8
• CVE-2021-20639LOGITEC LAN-W300N/PGRB allows an attacker with administrativ…6.8
• CVE-2021-20640Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allo…6.8
• CVE-2021-20641Cross-site request forgery (CSRF) vulnerability in LOGITEC L…6.5
• CVE-2021-20642Improper check or handling of exceptional conditions in LOGI…6.5
• CVE-2021-20643Improper access control vulnerability in ELECOM LD-PS/U1 all…7.5
• CVE-2021-20644ELECOM WRC-1467GHBK-A allows arbitrary scripts to be execute…6.1
• CVE-2021-20645Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A a…5.4