1936 matches found
CVE-2016-3499
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container...
Design/Logic Flaw
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container...
CVE-2016-3586
CVE-2016-3586 is described as an unspecified vulnerability in Oracle WebLogic Server components of Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 that can affect confidentiality, integrity, and availability via WLS Core Components; it is stated as a different issue from CVE-2016-3510. ...
CVE-2016-3499
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container...
CVE-2016-3510
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586...
Oracle WebLogic JtaTransactionManager Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle WebLogic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the use of JtaTransactionManager. It is possible to execute arbitrary commands upon...
Oracle WebLogic JBoss Interceptors Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle WebLogic. Authentication is not required to exploit this vulnerability. The specific flaw exists in the use of JBoss Interceptors library. By sending a specially crafted request, the...
Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2016-05196)
Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. Oracle Fusion Middleware versions 10.3.6.0, 12.1.3.0, 12.2.1.0, a security vulnerability exists in the WebLogic Server component, which can be exploited by remote attackers to compromise...
Unspecified Vulnerability in Oracle Fusion Middleware Oracle WebLogic Server Component
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...
Oracle WebLogic PartItem Arbitrary File Upload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle WebLogic. Authentication is not required to exploit this vulnerability. The PartItem class in WebLogic FileUpload allows remote attackers to write to arbitrary files via a NULL byte in a fil...
Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2016-05195)
Oracle Fusion Middleware is a comprehensive middleware portfolio of SOA and middleware products. An unspecified vulnerability exists in Oracle Fusion Middleware versions 10.3.6.0, 12.1.3.0, 12.2.1.0, in the WebLogic Server component, which can be exploited by remote attackers to compromise...
Oracle WebLogic Server Multiple Vulnerabilities (July 2016 CPU)
The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities : - An unspecified flaw exists in the Web Container subcomponent that allows an unauthenticated, remote attacker to cause a denial of service condition. CVE-2016-3445 - An unspecified flaw...
The vulnerability of WebLogic Server’s software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise the confidentiality, integrity, and accessibility of data by using WLS – Web Services...
The vulnerability of WebLogic Server’s software allows a malicious intruder to compromise the accessibility of protected information.
The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise data accessibility by exploiting the WebLogic Server JVM...
The vulnerability of WebLogic Server’s software allows a malicious intruder to compromise the accessibility of protected information.
The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise data accessibility by using WLS – Web Services...
The vulnerability of WebLogic Server’s software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise the confidentiality, integrity, and accessibility of data...
The vulnerability of WebLogic Server’s software allows a malicious intruder to compromise the accessibility of protected information.
The vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows malicious actors to compromise data accessibility by using WLS – Web Services...
The vulnerability of Oracle WebLogic Server application servers allows attackers to compromise the integrity, availability, and confidentiality of information.
The vulnerability of the Oracle WebLogic Server application server is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, availability, and confidentiality of information by manipulating the Java Messaging Service...
Oracle WebLogic Server Java Object Deserialization RCE (April 2016 CPU)
The remote Oracle WebLogic Server is affected by a remote code execution vulnerability in the Java Messaging Service subcomponent in the readExternal function due to improper sanitization of user-supplied input. An unauthenticated, remote attacker can exploit this, via a crafted object payload, t...
Unspecified Vulnerability in Oracle Fusion Middleware WebLogic Server Component (CNVD-2016-02481)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, of which Oracle WebLogic Server is an application server component for both cloud and traditional environments. An unspecified vulnerability exists in the Jav...