CVE-2019-2441

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Application Container - JavaEE. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2441

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Application Container - JavaEE. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2441

CVE-2019-2441 affects Oracle WebLogic Server 12.2.1.3 (Application Container - JavaEE). The vulnerability allows unauthenticated, network-based attackers to access WebLogic via HTTP and read a subset of data; CVSS v3.0 base score 5.3 (confidentiality impact: low). Connected sources confirm the af...

CVE-2019-2441: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Application Container - JavaEE. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2019-1318

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 12.2.1.3 Description The issue is related to insufficient access control in the Application Container - JavaEE component of Oracle WebLogic Server, allowing a remote attacker to gain unauthorized access to...

Struts2 remote code execution vulnerability detection principle and code level implementation-vulnerability warning-the black bar safety net

Laboratory evan-css analysis of the recent very fire of Struct2 vulnerability hole. Recently very fire the Struts2 vulnerability everyone should have heard of it, if you haven't heard it doesn't matter about this vulnerability can be described with a one-sentence summary: vulnerability is...