Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2890

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3 to compromise Oracle...

CVE-2019-2891

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2887

CVE-2019-2887 affects Oracle WebLogic Server (Web Services component) across 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability allows a low-privileged, network-authenticated attacker to access the server via HTTP and obtain unauthorized read access to a subset of WebLogic data. The issue ...

CVE-2019-2888

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2889

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

CVE-2019-2891

CVE-2019-2891 affects the Oracle WebLogic Server Console. Affects: Oracle WebLogic Server (Fusion Middleware) versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. Root cause: a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server, potentiall...

CVE-2019-2887

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-36445)

Oracle WebLogic Server is a Java EE application server. An unspecified vulnerability exists in the EJB Container component in Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. An attacker could exploit this vulnerability to affect confidentiality...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-36442)

Oracle WebLogic Server is a Java EE application server. An unspecified vulnerability exists in the Web Services component in Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. An attacker could exploit this vulnerability to compromise confidentiality...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-35411)

WebLogic is Oracle's JavaEE architecture based middleware for the development, integration, deployment and management of large-scale distributed Web applications, network applications and database applications. An unspecified vulnerability exists in Oracle WebLogic Server, which can be exploited ...

Oracle WebLogic Server Multiple Remote Security Vulnerabilities

Description Oracle WebLogic Server is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Console', 'Web Services', 'EJB Container', and 'Web Services' components are affected. These vulnerabilities affect the following supporte...

Oracle WebLogic Server CVE-2019-2889 Remote Security Vulnerability

Description Oracle WebLogic Server is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Sample apps' component is affected. This vulnerability affects the following supported versions: 12.2.1.3.0 Technologies Affected Oracle Weblogic Serve...

Exploit for Injection in Oracle Agile_Plm

CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE...

Exploit for Deserialization of Untrusted Data in Oracle Weblogic_Server

CVE-2018-2628 Weblogic GetShell.py is a Python script that exploits the Oracle Weblogic Server 10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3 deserialization remote command execution vulnerability. The script generates a payload using the ysoserial tool and sends it to the target server using a socket...

Vulnerability of the sub-component Application Container – The JavaEE application server Oracle WebLogic Server from the Oracle Fusion Middleware software platform, which allows attackers to gain control over the target system

The vulnerability of the sub-component Application Container – the JavaEE application server Oracle WebLogic Server from the Oracle Fusion Middleware software platform – is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain control over the...

The vulnerability of the WLS Core Components, a component of the Oracle WebLogic Server software from Oracle Fusion Middleware, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the WLS Core Components of the Oracle WebLogic Server component of the Oracle Fusion Middleware software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected...

CVE-2019-2856

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Application Container - JavaEE. Supported versions that are affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle...

CVE-2019-2827

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...