Lucene search
+L

532 matches found

BDU FSTEC
BDU FSTEC
added 2021/05/19 12:00 a.m.15 views

The vulnerability of the Coherence Container component of the Oracle WebLogic Server application server allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Coherence Container component of the Oracle WebLogic Server application server exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS7.4AI score0.0837EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:00 a.m.11 views

The vulnerability of the Core component of the Oracle Coherence data processing software allows a hacker to gain unauthorized access to the device.

The vulnerability of the Core component of the Oracle Coherence data processing software exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the device through HTTP requests...

7.8CVSS7.5AI score0.01123EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2021/04/22 10:15 p.m.24 views

CVE-2021-2277

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.5CVSS0.01123EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/22 10:15 p.m.6 views

CVE-2021-2277

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.5CVSS7.2AI score
SaveExploits0References1
OSV
OSV
added 2021/04/22 10:15 p.m.18 views

CVE-2021-2135

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Coherence Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

9.8CVSS7AI score0.0837EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/04/22 10:15 p.m.9 views

CVE-2021-2135

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Coherence Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

9.8CVSS6.9AI score0.0837EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2021/04/22 10:15 p.m.27 views

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Coherence Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

7.5CVSS9.3AI score0.0837EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/04/22 10:15 p.m.21 views

Design/Logic Flaw

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

5CVSS7.5AI score0.01123EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/04/22 10:15 p.m.7 views

CVE-2021-2277

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.5CVSS7AI score0.01123EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2021/04/22 9:53 p.m.94 views

CVE-2021-2277

CVE-2021-2277 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. It allows an unauthenticated attacker with network access via HTTP to access data, per CVSS 3.1 Base Score 7.5 (Confidentiality). The vulner...

7.5CVSS7.5AI score0.01123EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/04/22 9:53 p.m.17 views

CVE-2021-2277

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.5CVSS6.6AI score0.01123EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/04/22 9:53 p.m.35 views

CVE-2021-2277

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

7.5CVSS7.6AI score0.01123EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/04/22 9:53 p.m.40 views

CVE-2021-2135

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Coherence Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

9.8CVSS9.5AI score0.0837EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2021/04/22 9:53 p.m.16 views

CVE-2021-2135

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Coherence Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

9.8CVSS7.7AI score0.0837EPSS
SaveExploits1References1
CVE
CVE
added 2021/04/22 9:53 p.m.185 views

CVE-2021-2135

CVE-2021-2135 affects Oracle WebLogic Server (Coherence Container) versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. The Nuclei template confirms remote code execution via unauthenticated access over T3/IIOP, allowing an attacker with network access to take over the server. Documented impact is fu...

9.8CVSS9.5AI score0.0837EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/04/22 12:00 a.m.359 views

Oracle WebLogic Server Multiple Vulnerabilities (Apr 2021 CPU)

The version of WebLogic Server installed on the remote host is affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory. - An unspecified vulnerability exists in the Coherence Container component. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

9.8CVSS7.4AI score0.29236EPSS
SaveExploits3References13
Tenable Nessus
Tenable Nessus
added 2021/04/22 12:00 a.m.118 views

Oracle Coherence (Apr 2021 CPU)

The version of the Oracle Coherence installed on the remote host is missing a critical patch update. It is, therefore, affected by a vulnerability, as referenced in the April 2021 CPU advisory. - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core...

7.5CVSS6.9AI score0.17814EPSS
SaveExploits0References4
CNVD
CNVD
added 2021/04/21 12:00 a.m.16 views

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2021-30934)

Oracle WebLogic Server is a cloud-native, enterprise-grade Java platform application server for multi-tier distributed enterprise application development and deployment. A security vulnerability exists in the Coherence Container component in Oracle WebLogic Server versions 12.1.3.0.0, 12.2.1.3.0,...

9.8CVSS6.4AI score0.0837EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/04/21 12:00 a.m.20 views

Oracle Coherence Input Validation Error Vulnerability (CNVD-2021-33847)

Oracle Coherence is an application from Oracle Corporation. It provides fast access to frequently used data to enable predictable scaling of mission-critical applications. Oracle Coherence Core 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 suffers from an Input Authentication Error...

7.5CVSS6.8AI score0.01123EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/04/20 12:00 a.m.12 views

Oracle Coherence 输入验证错误漏洞

Oracle Coherence is an application from Oracle Corporation. It provides fast access to frequently used data to enable predictable scaling of mission-critical applications. Oracle Coherence Core 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0 suffers from an Input Authentication Error...

7.5CVSS8AI score0.01123EPSS
SaveExploits0References5
Rows per page
Query Builder