CVE-2017-10271

🗓️ 19 Oct 2017 17:00:00Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 11 Media mentions👁 1500 Views🌐 WEB

Oracle WebLogic Server CVE-2017-10271 Vulnerabilit

Reporter	Title	Published	Views	Family All 105
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	15 Oct 202515:06	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	28 Dec 201701:30	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	27 May 202607:37	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	16 Jan 201803:10	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	28 Dec 201707:19	–	githubexploit
GithubExploit	Exploit for Injection in Oracle Agile_Plm	23 Aug 201901:42	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	18 Nov 202002:31	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	13 Dec 201802:00	–	githubexploit
GithubExploit	Exploit for Improper Access Control in Oracle Communications_Diameter_Signaling_Router	31 May 202114:54	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server	5 Jan 201821:57	–	githubexploit

NVD

Vulners

Node

oracle weblogic_serverMatch10.3.6.0.0

oracle weblogic_serverMatch12.1.3.0.0

oracle weblogic_serverMatch12.2.1.1.0

oracle weblogic_serverMatch12.2.1.2.0

[
  {
    "product": "WebLogic Server",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "10.3.6.0.0"
      },
      {
        "status": "affected",
        "version": "12.1.3.0.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.1.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.2.0"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1039608
securityfocus	www.securityfocus.com/bid/101304
exploit-db	www.exploit-db.com/exploits/43924/
exploit-db	www.exploit-db.com/exploits/43458/
github	www.github.com/c0mmand3rOpSec/CVE-2017-10271
oracle	www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
soap envelope payload	request body	/wls-wsat/CoordinatorPortType	Deserialization-based RCE via WLS-WSAT endpoint (CVE-2017-10271) using crafted SOAP payload	CWE-306
XMLDecoder/ProcessBuilder payload	request body	/wls-wsat/CoordinatorPortType	Deserialization-based RCE via WLS-WSAT endpoint (CVE-2017-10271) using crafted SOAP payload	CWE-306

17 Jun 2026 01:00Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.99993

SSVC