CVE-2017-10271

🗓️ 19 Oct 2017 17:00:00Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 12 Media mentions👁 1558 Views🌐 WEB

Oracle WebLogic Server CVE-2017-10271 Vulnerabilit

Reporter	Title	Published	Views	Family All 133
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	15 Oct 202515:06	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	28 Dec 201701:30	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	27 May 202607:37	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	16 Jan 201803:10	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	28 Dec 201707:19	–	githubexploit
GithubExploit	Exploit for Injection in Oracle Agile_Plm	23 Aug 201901:42	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	18 Nov 202002:31	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	13 Dec 201802:00	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Oracle Communications_Diameter_Signaling_Router	31 May 202114:54	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	5 Jan 201821:57	–	githubexploit

NVD

Vulners

Node

oracle weblogic_serverMatch10.3.6.0.0

oracle weblogic_serverMatch12.1.3.0.0

oracle weblogic_serverMatch12.2.1.1.0

oracle weblogic_serverMatch12.2.1.2.0

[
  {
    "product": "WebLogic Server",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "10.3.6.0.0"
      },
      {
        "status": "affected",
        "version": "12.1.3.0.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.1.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.2.0"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
github	www.github.com/c0mmand3rOpSec/CVE-2017-10271
securityfocus	www.securityfocus.com/bid/101304
exploit-db	www.exploit-db.com/exploits/43458/
securitytracker	www.securitytracker.com/id/1039608
exploit-db	www.exploit-db.com/exploits/43924/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
XML payload (SOAP) containing XMLDecoder/ProcessBuilder payloads	request body	/wls-wsat/CoordinatorPortType	CVE-2017-10271 deserialization RCE in Oracle WebLogic Server WLS-WSAT via crafted SOAP to /wls-wsat/CoordinatorPortType using XMLDecoder/ProcessBuilder.	CWE-306

13 Aug 2026 05:17Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.9999

SSVC