CVE-2017-10271

🗓️ 19 Oct 2017 17:00:00Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 12 Media mentions👁 1577 Views🌐 WEB

Oracle WebLogic Server CVE-2017-10271 Vulnerabilit

Reporter	Title	Published	Views	Family All 135
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	15 Oct 202515:06	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	28 Dec 201701:30	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	27 May 202607:37	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	18 Feb 201801:40	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	16 Jan 201803:10	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	28 Dec 201707:19	–	githubexploit
GithubExploit	Exploit for Injection in Oracle Agile_Plm	23 Aug 201901:42	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	18 Nov 202002:31	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	13 Dec 201802:00	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Oracle Communications_Diameter_Signaling_Router	31 May 202114:54	–	githubexploit

NVD

Vulners

Node

oracle weblogic_serverMatch10.3.6.0.0

oracle weblogic_serverMatch12.1.3.0.0

oracle weblogic_serverMatch12.2.1.1.0

oracle weblogic_serverMatch12.2.1.2.0

[
  {
    "product": "WebLogic Server",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "10.3.6.0.0"
      },
      {
        "status": "affected",
        "version": "12.1.3.0.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.1.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.2.0"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1039608
securityfocus	www.securityfocus.com/bid/101304
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
github	www.github.com/c0mmand3rOpSec/CVE-2017-10271
exploit-db	www.exploit-db.com/exploits/43924/
exploit-db	www.exploit-db.com/exploits/43458/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
SOAP body	request body	/wls-wsat/CoordinatorPortType11	Exploit via crafted SOAP payload to trigger WLS deserialization and remote code execution on WebLogic Server (CVE-2017-10271).	CWE-306
WorkContext	request body	/wls-wsat/CoordinatorPortType11	Exploit via crafted SOAP payload to trigger WLS deserialization and remote code execution on WebLogic Server (CVE-2017-10271).	CWE-306
java.beans.XMLDecoder	request body	/wls-wsat/CoordinatorPortType11	Exploit via crafted SOAP payload to trigger WLS deserialization and remote code execution on WebLogic Server (CVE-2017-10271).	CWE-306
ProcessBuilder	request body	/wls-wsat/CoordinatorPortType11	Exploit via crafted SOAP payload to trigger WLS deserialization and remote code execution on WebLogic Server (CVE-2017-10271).	CWE-306

13 Aug 2026 05:17Current

7.8High risk

Vulners AI Score7.8

CVSS 25

CVSS 3.17.5

EPSS0.9999

SSVC