Lucene search

K
nessusThis script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.ORACLE_WEBLOGIC_IIOP_CVE-2020-2551.NBIN
HistoryJul 15, 2020 - 12:00 a.m.

Oracle WebLogic IIOP JNDI Lookup RCE Direct Check

2020-07-1500:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
33

A remote code execution vulnerability was found in Oracle Weblogic Server. A remote, unauthenticated attacker could exploit this vulnerability and cause a remote IIOP server to initialize a Java object that invokes a JNDI lookup to a remote, attacker-controlled server. A malicious JNDI lookup will result in code execution.

Binary data oracle_weblogic_iiop_cve-2020-2551.nbin
VendorProductVersionCPE
oracleweblogiccpe:/a:oracle:weblogic