Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1517 matches found

Tenable Nessus
Tenable Nessus•added 2017/10/04 12:0 a.m.•73 views

Oracle WebLogic Server Multiple Vulnerabilities

Binary data oracleweblogicserverCVE-2017-9805.nbin...

10CVSS8.5AI score0.99999EPSS
SaveExploits92References12
0day.today
0day.today•added 2017/09/28 12:0 a.m.•1153 views

Oracle WebLogic Server 10.3.6.0 - Java Deserialization Exploit

Exploit for java platform in category remote exploits Exploit Title: Oracle WebLogic Server Java Deserialization Remote Code Execution Date: 27/09/2017 Exploit Author: SlidingWindow , Twitter: @kapilkhot Vulnerability Author: FoxGloveSecurity Vendor Homepage:...

7.5CVSS8.7AI score0.96032EPSS
SaveExploits18
Exploit DB
Exploit DB•added 2017/09/27 12:0 a.m.•1887 views

Oracle WebLogic Server 10.3.6.0 - Java Deserialization Remote Code Execution

Exploit Title: Oracle WebLogic Server Java Deserialization Remote Code Execution Date: 27/09/2017 Exploit Author: SlidingWindow , Twitter: @kapilkhot Vulnerability Author: FoxGloveSecurity Vendor Homepage: http://www.oracle.com/technetwork/middleware/weblogic/overview/index.html Affetcted Version...

9.8CVSS7.9AI score0.96032EPSS
SaveExploits18
BDU FSTEC
BDU FSTEC•added 2017/08/25 12:0 a.m.•7 views

The vulnerability of the JNDI component of the Oracle WebLogic Server application server allows a hacker to gain control over the application server.

The vulnerability of the JNDI component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain control over the Oracle WebLogic Server application server through HTTP requests...

10CVSS7.7AI score0.03792EPSS
SaveExploits0References4Affected Software1
OSV
OSV•added 2017/08/08 3:29 p.m.•6 views

CVE-2017-10178

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS7.3AI score0.0147EPSS
SaveExploits0References3
NVD
NVD•added 2017/08/08 3:29 p.m.•30 views

CVE-2017-10137

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: JNDI. Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

10CVSS9AI score0.03792EPSS
SaveExploits0References3
OSV
OSV•added 2017/08/08 3:29 p.m.•4 views

CVE-2017-10123

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...

4.3CVSS7.3AI score0.01418EPSS
SaveExploits0References3
OSV
OSV•added 2017/08/08 3:29 p.m.•5 views

CVE-2017-10148

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

5.8CVSS7.3AI score0.02589EPSS
SaveExploits0References5
NVD
NVD•added 2017/08/08 3:29 p.m.•23 views

CVE-2017-10148

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

5.8CVSS4.8AI score0.02589EPSS
SaveExploits0References5
Prion
Prion•added 2017/08/08 3:29 p.m.•23 views

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

5.8CVSS4AI score0.01637EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2017/08/08 3:29 p.m.•27 views

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: JNDI. Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

7.5CVSS8.8AI score0.03792EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2017/08/08 3:29 p.m.•20 views

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...

4CVSS2.6AI score0.01418EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist•added 2017/08/08 3:0 p.m.•26 views

CVE-2017-10148

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

6AI score0.02589EPSS
SaveExploits0References5
CVE
CVE•added 2017/08/08 3:0 p.m.•93 views

CVE-2017-10137

CVE-2017-10137 affects Oracle WebLogic Server (Oracle Fusion Middleware), subcomponent JNDI . Affected versions are 10.3.6.0 and 12.1.3.0 . The vulnerability is described as easily exploitable with an unauthenticated attacker who can reach the server over HTTP , potentially leading to takeover of...

10CVSS9.2AI score0.03792EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment•added 2017/08/08 3:0 p.m.•15 views

CVE-2017-10147

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

6.9AI score0.04212EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment•added 2017/08/08 3:0 p.m.•11 views

CVE-2017-10063

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

5.8AI score0.01637EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2017/08/08 3:0 p.m.•27 views

CVE-2017-10147

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

8.3AI score0.04212EPSS
SaveExploits0References5
Cvelist
Cvelist•added 2017/08/08 3:0 p.m.•30 views

CVE-2017-10063

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services. Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...

5.4AI score0.01637EPSS
SaveExploits0References3
Cvelist
Cvelist•added 2017/08/08 3:0 p.m.•32 views

CVE-2017-10137

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: JNDI. Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

9.3AI score0.03792EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment•added 2017/08/08 3:0 p.m.•17 views

CVE-2017-10137

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: JNDI. Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

7.6AI score0.03792EPSS
SaveExploits0References3
Rows per page
Query Builder