Oracle WebLogic Server Apache-Commons-FileUpload Library Insecure Deserialization (CVE-2013-2186)

An insecure deserialization vulnerability has been reported in Oracle WebLogic Server. This vulnerability is due to deseralization of untrusted data while having the vulnerable version of Apache-Commons-FileUpload library in the code path. A remote, unauthenticated attacker can exploit this...

Oracle WebLogic Server Java Object Deserialization RCE (July 2016 CPU)

The remote Oracle WebLogic Server is affected by a remote code execution vulnerability in the WLS Core component in the readObject function due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via a crafted object payload, to bypass the...

Oracle WebLogic Server Java Deserialization / RCE Vulnerability (CVE-2015-4852) - Active Check

Oracle WebLogic Server is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-3499

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container...

CVE-2016-3499

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container...

CVE-2016-3586

CVE-2016-3586 is described as an unspecified vulnerability in Oracle WebLogic Server components of Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 that can affect confidentiality, integrity, and availability via WLS Core Components; it is stated as a different issue from CVE-2016-3510. ...

CVE-2016-3510

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2016-05196)

Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. Oracle Fusion Middleware versions 10.3.6.0, 12.1.3.0, 12.2.1.0, a security vulnerability exists in the WebLogic Server component, which can be exploited by remote attackers to compromise...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle WebLogic Server Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

Oracle WebLogic Server Multiple Vulnerabilities (July 2016 CPU)

The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities : - An unspecified flaw exists in the Web Container subcomponent that allows an unauthenticated, remote attacker to cause a denial of service condition. CVE-2016-3445 - An unspecified flaw...

The vulnerability of WebLogic Server’s software allows a malicious intruder to compromise the accessibility of protected information.

The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise data accessibility by exploiting the WebLogic Server JVM...

The vulnerability of WebLogic Server’s software allows a malicious intruder to compromise the accessibility of protected information.

The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise data accessibility by using WLS – Web Services...

The vulnerability of WebLogic Server’s software allows a malicious intruder to compromise the accessibility of protected information.

The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise data accessibility by using WLS – Web Services...

The vulnerability of WebLogic Server’s software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise the confidentiality, integrity, and accessibility of data...

The vulnerability of Oracle WebLogic Server application servers allows attackers to compromise the integrity, availability, and confidentiality of information.

The vulnerability of the Oracle WebLogic Server application server is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, availability, and confidentiality of information by manipulating the Java Messaging Service...

Oracle WebLogic Server Java Object Deserialization RCE (April 2016 CPU)

The remote Oracle WebLogic Server is affected by a remote code execution vulnerability in the Java Messaging Service subcomponent in the readExternal function due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via a crafted object payload, t...

Unspecified Vulnerability in Oracle Fusion Middleware WebLogic Server Component (CNVD-2016-02481)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebLogic Server is an application server component for both cloud and traditional environments. An unspecified vulnerability exists in the Jav...

CVE-2016-3416

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality and integrity via vectors related to Console...

CVE-2016-0700

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675...