Lucene search
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_112524HistoryJul 07, 2020 - 12:00 a.m.
Oracle WebLogic WSAT Remote Code Execution
2020-07-0700:00:00
This script is Copyright (C) 2020-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
14
The remote Oracle WebLogic server is affected by a remote code execution vulnerability in the WSAT endpoint due to unsafe deserialization of XML encoded Java objects. An unauthenticated, remote attacker can exploit this, via a crafted Java object, to execute arbitrary Java code in the context of the WebLogic server.
No source data| Vendor | Product | Version | CPE |
|---|---|---|---|
| oracle | weblogic_server | * | cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:* |