Lucene search
+L

1594 matches found

CNNVD
CNNVD
added 2023/01/18 12:00 a.m.10 views

Oracle WebLogic Server 安全漏洞

Oracle WebLogic Server is an Oracle Oracle application service middleware for cloud and traditional environments, which provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application...

7.5CVSS6.5AI score0.00736EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/01/18 12:00 a.m.15 views

Oracle WebLogic Server 安全漏洞

Oracle WebLogic Server is an Oracle Oracle application service middleware for cloud and traditional environments, which provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application...

7.5CVSS6.5AI score0.00949EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/01/18 12:00 a.m.147 views

CVE-2023-21839

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

7.5CVSS8.1AI score0.999EPSS
SaveIn wildExploits12References4
CVE
CVE
added 2023/01/17 11:35 p.m.113 views

CVE-2023-21837

CVE-2023-21837 - Oracle WebLogic Server (Core) vulnerability : Affected versions are 12.2.1.3.0–12.2.1.4.0 and 14.1.1.0.0. The issue arises from insufficient input validation in the Core component, exploitable by an unauthenticated attacker over IIOP to disclose or potentially access sensitive da...

7.5CVSS7.1AI score0.00949EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.15 views

PT-2023-1309 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an...

7.8CVSS8.8AI score0.00857EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.11 views

PT-2023-1311 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an...

7.8CVSS9AI score0.00736EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.10 views

PT-2023-1310 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, part of the Oracle...

7.8CVSS8.9AI score0.00949EPSS
SaveExploits1References7
Tenable Nessus
Tenable Nessus
added 2022/10/20 12:00 a.m.53 views

Oracle WebLogic Server 14.1.1 < 14.1.1.0.221010 (Oct 2022 CPU)

The version of Oracle WebLogic Server installed on the remote host is missing a security patch from the October 2022 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities, including: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware...

8.1CVSS6.9AI score0.11615EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
added 2022/10/20 12:00 a.m.57 views

Oracle WebLogic Server (Oct 2022 CPU)

The version of Oracle WebLogic Server installed on the remote host is missing a security patch from the October 2022 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities, including: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware...

8.1CVSS7.1AI score0.11615EPSS
SaveExploits2References8
ATTACKERKB
ATTACKERKB
added 2022/10/18 9:15 p.m.18 views

CVE-2022-21616

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.2CVSS6.7AI score0.00244EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/10/18 9:15 p.m.14 views

CVE-2022-21616

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.2CVSS5.8AI score0.00244EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/18 9:15 p.m.22 views

CVE-2022-21616

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.2CVSS0.00244EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/18 9:15 p.m.24 views

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

3.4CVSS5.3AI score0.00244EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/18 12:00 a.m.9 views

CVE-2022-21616

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.2CVSS5.9AI score0.00244EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/10/18 12:00 a.m.31 views

CVE-2022-21616

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.2CVSS5.7AI score0.00244EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/10/05 12:00 a.m.144 views

Oracle Primavera P6 Enterprise Project Portfolio Management (Jul 2022 CPU)

The versions of Primavera P6 Enterprise Project Portfolio Management installed on the remote host are affected by a vulnerability as referenced in the July 2022 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Centralized Third Party Jars...

7.5CVSS6.7AI score0.0486EPSS
SaveExploits1References3
hivepro
hivepro
added 2022/09/22 8:24 a.m.27 views

Kinsing malware continues to exploit these two-year-old vulnerabilities

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Malicious actors are exploiting these two-year-old remote code execution vulnerabilities in Oracle WebLogic Server to deploy Kinsing malware...

5.9AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2022/09/08 12:00 a.m.11 views

VulnCheck KEV: CVE-2018-2628

Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server...

9.8CVSS7.4AI score0.99448EPSS
SaveExploits70References1
CISA KEV Catalog
CISA KEV Catalog
added 2022/09/08 12:00 a.m.26 views

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server...

9.8CVSS4.9AI score0.99448EPSS
SaveIn wildExploits70
BDU FSTEC
BDU FSTEC
added 2022/08/08 12:00 a.m.14 views

The vulnerability of the Core server component of Oracle WebLogic Server allows a attacker to trigger a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

5.3CVSS6.3AI score0.01013EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder