CVE-2017-3248

🗓️ 27 Jan 2017 22:01:00Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 366 Views🌐 WEB

Vulnerability in Oracle WebLogic Server component of Oracle Fusion Middleware (CVE-2017-3248). Easily exploitable to compromise server. CVSS v3.0 Base Score 9.8

Reporter	Title	Published	Views	Family All 33
GithubExploit	Nessus-CVE-POC-Finder	30 Jun 202613:08	–	githubexploit
GithubExploit	Exploit for CVE-2017-3248	7 Jul 201812:29	–	githubexploit
GithubExploit	Exploit for Deserialization of Untrusted Data in Oracle Weblogic_Server	3 May 201803:13	–	githubexploit
0day.today	Oracle WebLogic 12.1.2.0 RMI Registry UnicastRef Object Java Deserialization Remote Code Execution	10 Jul 201800:00	–	zdt
Gitee	Exploit for Deserialization of Untrusted Data in Oracle Weblogic_Server	5 Feb 202001:43	–	gitee
Gitee	Exploit for Deserialization of Untrusted Data in Oracle Weblogic_Server	2 Mar 202015:04	–	gitee
Gitee	Exploit for Code Injection in Microsoft	27 Nov 202010:59	–	gitee
Gitee	Exploit for Code Injection in Microsoft	25 Nov 202023:04	–	gitee
Gitee	Exploit for Code Injection in Microsoft	17 Nov 202009:07	–	gitee
BDU FSTEC	The vulnerability of Oracle Fusion Middleware’s core components allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	9 Feb 201700:00	–	bdu_fstec

NVD

Vulners

Node

oracle weblogic_serverMatch10.3.6.0.0

oracle weblogic_serverMatch12.1.3.0.0

oracle weblogic_serverMatch12.2.1.0.0

oracle weblogic_serverMatch12.2.1.1.0

[
  {
    "product": "WebLogic Server",
    "vendor": "Oracle",
    "versions": [
      {
        "status": "affected",
        "version": "10.3.6.0"
      },
      {
        "status": "affected",
        "version": "12.1.3.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.1"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1037632
tenable	www.tenable.com/security/research/tra-2017-07
oracle	www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
packetstormsecurity	www.packetstormsecurity.com/files/152357/Oracle-Weblogic-Server-Deserialization-RMI-UnicastRef-Remote-Code-Execution.html
exploit-db	www.exploit-db.com/exploits/44998/
securityfocus	www.securityfocus.com/bid/95465
vicarius	www.vicarius.io/vsociety/posts/cve-2017-3248-mitigate-centos-weblogic-rce
vicarius	www.vicarius.io/vsociety/posts/cve-2017-3248-detect-centos-weblogic-rce

Parameter	Position	Path	Description
WorkContext	request body	wls-wsat/CoordinatorPortType11	WebLogic wls-wsat RCE via crafted SOAP request (CVE-2017-10271).
java.beans.XMLDecoder	request body	wls-wsat/CoordinatorPortType11	WebLogic wls-wsat RCE via crafted SOAP request (CVE-2017-10271).
ProcessBuilder	request body	wls-wsat/CoordinatorPortType11	WebLogic wls-wsat RCE via crafted SOAP request (CVE-2017-10271).
nslookup	request body	wls-wsat/CoordinatorPortType11	WebLogic wls-wsat RCE via crafted SOAP request (CVE-2017-10271).

17 Jun 2026 01:17Current

9.3High risk

Vulners AI Score9.3

CVSS 27.5

CVSS 39.8

EPSS0.97301

SSVC