Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2017-10271
HistoryOct 19, 2017 - 5:29 p.m.

CVE-2017-10271

2017-10-1917:29:00
NVD-CWE-noinfo
[email protected]
web.nvd.nist.gov
1128
In Wild
10
oracle
weblogic
server
cve-2017-10271
vulnerability
nvd
oracle fusion middleware
wls security
exploitable
cvss 3.0

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.974 High

EPSS

Percentile

99.9%

JSON

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

VendorProductVersionCPE
oracleweblogic_server*cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*
oracleweblogic_server*cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*
oracleweblogic_server*cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*
oracleweblogic_server*cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*

Social References

More

Related

exploitpack 2
nuclei 1
metasploit 1
nessus 2
attackerkb 1
hackerone 2
securelist 4
packetstorm 1
malwarebytes 1
fireeye 6
symantec 1
prion 1
zdt 2
cisa_kev 1
exploitdb 3
threatpost 11
thn 3
talosblog 4
seebug 1
checkpoint_advisories 1
pentestit 1
githubexploit 1
openvas 1
kitploit 3
cisa 1
qualysblog 2
impervablog 1
oracle 1
exploitpack
exploitpack
Oracle WebLogic Server 10.3.6.0.0 12.x - Remote Command Execution
2017-12-26 00:00:00
Oracle WebLogic 10.3.6 - wls-wsat Component Deserialisation Remote Command Execution
2018-01-03 00:00:00
nuclei
nuclei
Oracle WebLogic Server - Remote Command Execution
2021-02-03 00:48:46
metasploit
metasploit
Oracle WebLogic wls-wsat Component Deserialization RCE
2018-01-05 20:05:21
nessus
nessus
Oracle WebLogic WSAT Remote Code Execution
2017-12-28 00:00:00
Oracle WebLogic Server Multiple Vulnerabilities (October 2017 CPU)
2017-10-18 00:00:00
attackerkb
attackerkb
CVE-2017-10271 - Oracle WebLogic Server AsyncResponseService Deserialization Vulnerability
2017-10-19 00:00:00
hackerone
hackerone
MTN Group: Remote OS Command Execution on Oracle Weblogic server via [CVE-2017-10271]
2020-03-04 13:45:59
U.S. Dept Of Defense: RCE on █████ via CVE-2017-10271
2019-05-10 22:23:31
securelist
securelist
Andariel deploys DTrack and Maui ransomware
2022-08-09 10:00:46
APT trends report Q3 2019
2019-10-16 10:00:26
APT review: what the world’s threat actors got up to in 2019
2019-12-04 10:00:22
packetstorm
packetstorm
Oracle WebLogic wls-wsat Component Deserialization Remote Code Execution
2018-01-28 00:00:00
malwarebytes
malwarebytes
The state of malicious cryptomining
2018-02-26 16:08:03
fireeye
fireeye
Malicious PowerShell Detection via Machine Learning
2018-07-10 12:00:00
How the Rise of Cryptocurrencies Is Shaping the Cyber Crime Landscape: The Growth of Miners
2018-07-18 14:00:00
How the Rise of Cryptocurrencies Is Shaping the Cyber Crime Landscape: The Growth of Miners
2018-07-18 10:00:00
symantec
symantec
Oracle WebLogic Server CVE-2017-10271 Remote Security Vulnerability
2017-10-17 00:00:00
prion
prion
Design/Logic Flaw
2017-10-19 17:29:00
zdt
zdt
Oracle WebLogic < 10.3.6 - wls-wsat Component Deserialisation Remote Command Execution Exploit
2018-01-08 00:00:00
Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution Exploit
2018-01-29 00:00:00
cisa_kev
cisa_kev
Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
2022-02-10 00:00:00
exploitdb
exploitdb
Oracle WebLogic Server 10.3.6.0.0 / 12.x - Remote Command Execution
2017-12-26 00:00:00
Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution (Metasploit)
2018-01-29 00:00:00
Oracle WebLogic &lt; 10.3.6 - &#039;wls-wsat&#039; Component Deserialisation Remote Command Execution
2018-01-03 00:00:00
threatpost
threatpost
New Threat Actor ‘Rocke’: A Rising Monero Cryptomining Menace
2018-08-30 20:35:39
Muhstik Botnet Exploits Highly Critical Drupal Bug
2018-04-23 22:13:25
Oracle WebLogic Exploit-fest Continues with GandCrab Ransomware, XMRig
2019-05-06 20:04:55
thn
thn
New Cryptojacking Malware Targeting Apache, Oracle, Redis Servers
2021-02-01 11:15:00
Hackers Exploiting Drupal Vulnerability to Inject Cryptocurrency Miners
2018-04-18 09:49:00
Muhstik Botnet Targeting Redis Servers Using Recently Disclosed Vulnerability
2022-03-28 06:59:00
talosblog
talosblog
Rocke: The Champion of Monero Miners
2018-08-30 08:26:00
Ransom Where? Malicious Cryptocurrency Miners Takeover, Generating Millions
2018-01-31 07:58:00
Cryptocurrency miners aren’t dead yet: Documenting the voracious but simple “Panda”
2019-09-17 08:09:45
seebug
seebug
Oracle WebLogic wls-wsat RCE(CVE-2017-10271)
2017-12-22 00:00:00
checkpoint_advisories
checkpoint_advisories
Oracle WebLogic WLS Security Component Remote Code Execution (CVE-2017-10271; CVE-2017-3506)
2017-12-27 00:00:00
pentestit
pentestit
UPDATE: Infection Monkey 1.6.1
2018-12-03 22:28:53
githubexploit
githubexploit
Exploit for Injection in Oracle Weblogic Server
2019-08-23 01:42:57
openvas
openvas
Oracle WebLogic Server Multiple Vulnerabilities (cpujul2017-3236622)
2017-07-19 00:00:00
kitploit
kitploit
Sn1per v7.0 - Automated Pentest Framework For Offensive Security Experts
2019-05-12 13:09:00
Jok3R - Network And Web Pentest Framework
2019-01-23 12:25:00
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 11:30:00
cisa
cisa
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-02-10 00:00:00
qualysblog
qualysblog
Top 19+ Vulnerability CVEs in Santa’s Dashboard Tracking
2019-12-27 18:01:22
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
impervablog
impervablog
Deserialization Attacks Surge Motivated by Illegal Crypto-mining
2018-01-24 17:45:08
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2017-10271
exploitpack2nuclei1metasploit1nessus2attackerkb1hackerone2securelist4packetstorm1malwarebytes1fireeye6symantec1prion1zdt2cisa_kev1exploitdb3threatpost11thn3talosblog4seebug1checkpoint_advisories1pentestit1githubexploit1openvas1kitploit3cisa1qualysblog2impervablog1oracle1