PT-2016-6576

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0 through 12.2.1.1 Description The issue affects confidentiality and integrity, and it is related to CIE Related Components. Recommendations For versions 12.1.3.0 through 12.2.1.1, at the moment, there is...

The vulnerability of Oracle WebLogic Server application servers allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the Oracle WebLogic Server application server is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of information by manipulating components related to WLS Core Components...

Oracle WebLogic Server Apache-Commons-FileUpload Library Insecure Deserialization (CVE-2013-2186)

An insecure deserialization vulnerability has been reported in Oracle WebLogic Server. This vulnerability is due to deseralization of untrusted data while having the vulnerable version of Apache-Commons-FileUpload library in the code path. A remote, unauthenticated attacker can exploit this...

Oracle WebLogic Server Java Object Deserialization RCE (July 2016 CPU)

The remote Oracle WebLogic Server is affected by a remote code execution vulnerability in the WLS Core component in the readObject function due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via a crafted object payload, to bypass the...

Oracle WebLogic Server Java Deserialization / RCE Vulnerability (CVE-2015-4852) - Active Check

Oracle WebLogic Server is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-3499

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container...

CVE-2016-3586

CVE-2016-3586 is described as an unspecified vulnerability in Oracle WebLogic Server components of Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 that can affect confidentiality, integrity, and availability via WLS Core Components; it is stated as a different issue from CVE-2016-3510. ...

CVE-2016-3499

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container...

CVE-2016-3510

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2016-05196)

Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. Oracle Fusion Middleware versions 10.3.6.0, 12.1.3.0, 12.2.1.0, a security vulnerability exists in the WebLogic Server component, which can be exploited by remote attackers to compromise...

CVE-2016-3586: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3510...

CVE-2016-3499: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container...

CVE-2016-3445: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-5488...

PT-2016-5519

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0 through 12.2.1.0 Description The issue affects the confidentiality, integrity, and availability of the system. It is related to the Web Container in Oracle WebLogic Server. Recommendations For versions...

PT-2016-5467

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0 through 12.1.3.0 Description The issue allows remote attackers to affect availability via vectors related to Web Container. Recommendations For versions 10.3.6.0 and 12.1.3.0, at the moment, there is no...

PT-2016-2700

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, and 12.2.1.0 Description The issue affects the confidentiality, integrity, and availability of data. It is related to errors in the code of the Oracle WebLogic Server component, specifically ...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle WebLogic Server Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

PT-2016-5530

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, and 12.2.1.0 Description The issue affects confidentiality, integrity, and availability. It is related to WLS Core Components in Oracle WebLogic Server and involves deserialization of untrust...

CVE-2016-3510: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586...