Oracle WebLogic Server Denial-of-Service Vulnerability via HTTP/2

A denial-of-service vulnerability has been identified in Oracle WebLogic Server versions 14.1.1.0.0 and 14.1.2.0.0, within the Core component of Oracle Fusion Middleware. This vulnerability allows an unauthenticated attacker with network access via HTTP/2 to disrupt the server's availability. Exploitation of this issue can lead to a complete hang or a frequently repeatable crash of the WebLogic Server.

Impact

Exploitation of this vulnerability can cause a complete denial-of-service condition on the affected Oracle WebLogic Server, leading to a hang or a frequently repeatable crash.