Lucene search
This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEBLOGIC_ASYNC_RESPONSE_RCE.NBINHistoryApr 26, 2019 - 12:00 a.m.
Oracle WebLogic WLS9-async Remote Code Execution (remote check)
2019-04-2600:00:00
This script is Copyright (C) 2019-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
106
The remote Oracle WebLogic server is affected by a remote code execution vulnerability in the WLS9-async component due to unsafe deserialization of XML encoded Java objects. An unauthenticated, remote attacker can exploit this, via a crafted Java object, to execute arbitrary Java code in the context of the WebLogic server.
Binary data weblogic_async_response_rce.nbin| Vendor | Product | Version | CPE |
|---|---|---|---|
| oracle | weblogic_server | cpe:/a:oracle:weblogic_server |