CVE-2024-21215

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

CVE-2024-21215

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

CVE-2024-21274

CVE-2024-21274 affects Oracle WebLogic Server (Console component) in 12.2.1.4.0 and 14.1.1.0.0. The issue allows an unauthenticated, network-accessible attacker via HTTP to cause a hang or a frequent crash (complete DoS) of WebLogic Server. Root cause: improper handling of resources during input ...

CVE-2024-21260

CVE-2024-21260 affects Oracle WebLogic Server (Fusion Middleware Core). The vulnerability concerns Core input handling in WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0, reported to be exploitable without authentication over T3/IIOP and capable of causing a hang or complete denial of service....

CVE-2024-21234

CVE-2024-21234 affects Oracle WebLogic Server (Oracle Fusion Middleware, Core component) and impacts versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated remote compromise via network protocols (T3, IIOP) with potential unauthorized data access; CVSS 3.1 base score 7.5 (H)...

CVE-2024-21216

CVE-2024-21216 affects Oracle WebLogic Server (Fusion Middleware core) with affected versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability enables an unauthenticated attacker who can reach the server over T3 or IIOP to execute code and potentially take over the WebLogic Server. CVSS 3.1 base scor...

CVE-2024-21215

CVE-2024-21215 affects Oracle WebLogic Server (Fusion Middleware), specifically Core component, in versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated, network-accessible exploitation (via HTTP) that can cause the server to hang or crash (complete DoS). Other sources also...

Oracle Fusion Middleware 安全漏洞

Oracle WebLogic Server is an enterprise-class application server developed by Oracle for building and deploying multi-tier distributed applications with high performance, scalability, and reliability. Oracle WebLogic Server has a remote code execution vulnerability that can be exploited by an...

PT-2024-6823

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0 Description The issue is related to a vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware, specifically in the Core component. This vulnerability allows an...

Oracle Fusion Middleware 安全漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, and other capabilities. webLogic Server is one of the application server components fo...

VulnCheck KEV: CVE-2020-14644

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution...

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to gain access to the software environment.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to the software environment by sending specially craft...

Oracle WebLogic Server (July 2024 CPU)

The 12.2.1.4.0 and 14.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that a...

CVE-2024-21182

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-21183

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-21181

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-21183

CVE-2024-21183 affects Oracle WebLogic Server Core in Fusion Middleware (versions 12.2.1.4.0 and 14.1.1.0.0). The issue allows unauthenticated network access via T3/IIOP to obtain unauthorized access to sensitive data. Documented impact: potential data exposure; CVSS base 7.5 (HIGH). Mitigation: ...

CVE-2024-21181

CVE-2024-21181 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. The vulnerability impacts the 12.2.1.4.0 and 14.1.1.0.0 release lines and allows an unauthenticated, network-accessible attacker (via T3 or IIOP) to compromise the WebLogic Server, potentially leading to takeover. T...

CVE-2024-21175

CVE-2024-21175 affects Oracle WebLogic Server (Fusion Middleware Core) for 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated, network-facilitated access over HTTP to compromise the server, enabling unauthorized creation, deletion or modification of data. Public sources agree on ...

8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining

Security researchers have shed more light on the cryptocurrency mining operation conducted by the 8220 Gang by exploiting known security flaws in the Oracle WebLogic Server. "The threat actor employs fileless execution techniques, using DLL reflective and process injection, allowing the malware...