2507 matches found
CVE-2019-2891: Undefined Security Weakness
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2019-2888: Undefined Security Weakness
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-36445)
Oracle WebLogic Server is a Java EE application server. An unspecified vulnerability exists in the EJB Container component in Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. An attacker could exploit this vulnerability to affect confidentiality...
Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-35411)
WebLogic is Oracle's JavaEE architecture based middleware for the development, integration, deployment and management of large-scale distributed Web applications, network applications and database applications. An unspecified vulnerability exists in Oracle WebLogic Server, which can be exploited ...
Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-36442)
Oracle WebLogic Server is a Java EE application server. An unspecified vulnerability exists in the Web Services component in Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. An attacker could exploit this vulnerability to compromise confidentiality...
CVE-2019-2887: Undefined Security Weakness
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
CVE-2019-2889: Undefined Security Weakness
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...
CVE-2019-2890: Undefined Security Weakness
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3 to compromise Oracle...
Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-36443)
Oracle WebLogic Server is a Java EE application server. An unspecified vulnerability exists in the Web Services component in Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. An attacker could exploit this vulnerability to affect confidentiality, integrity, and availability...
PT-2019-3745
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.3.0 Description The issue is related to inadequate access control in the SOAP with Attachments API for Java component of Oracle WebLogic Server, part of the Oracle Fusion Middleware platform. This can be...
Oracle WebLogic Server Multiple Remote Security Vulnerabilities
Description Oracle WebLogic Server is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Console', 'Web Services', 'EJB Container', and 'Web Services' components are affected. These vulnerabilities affect the following supporte...
Oracle WebLogic Server CVE-2019-2889 Remote Security Vulnerability
Description Oracle WebLogic Server is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Sample apps' component is affected. This vulnerability affects the following supported versions: 12.2.1.3.0 Technologies Affected Oracle Weblogic Serve...
PT-2019-3777
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Description The issue is related to a lack of protection for service data in the EJB Container component of Oracle WebLogic Server. This allows an unauthenticated attacker with...
PT-2019-3776
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 12.2.1.3.0 Description The issue is related to inadequate access control in the Sample apps component of Oracle WebLogic Server, part of Oracle Fusion Middleware. This allows an unauthenticated attacker with...
PT-2019-3778
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Description The issue is related to the Web Services component of Oracle WebLogic Server, which is part of Oracle Fusion Middleware. It allows a low-privileged attacker with...
PT-2019-3775
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Description The issue is related to insufficient access control in the Web Services component of Oracle WebLogic Server, part of the Oracle Fusion Middleware platform. This can...
PT-2019-3774
Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 Description The issue is related to inadequate access control in the Console subcomponent of Oracle WebLogic Server, part of the Oracle Fusion Middleware platform. This can be...
XML Entity Injection Vulnerability in WebLogic
Oracle WebLogic is a Java EE application server. WebLogic suffers from an XML entity injection vulnerability that can be exploited by an attacker to obtain sensitive information...
The WebLogic vulnerability and patch analysis-vulnerability warning-the black bar safety net
Earlier this year, researchers found and published the Oracle WebLogic in a deserialization vulnerability. This vulnerability is more serious, so Oracle breaks the normal quarterly release patches practice, specially issued an emergency update. Unfortunately, the researchers soon realized that an...
