CVE-2024-21260

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-21234

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-21234

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-21215

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

CVE-2024-21215

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

CVE-2024-21274

CVE-2024-21274 affects Oracle WebLogic Server (Console component) in 12.2.1.4.0 and 14.1.1.0.0. The issue allows an unauthenticated, network-accessible attacker via HTTP to cause a hang or a frequent crash (complete DoS) of WebLogic Server. Root cause: improper handling of resources during input ...

CVE-2024-21260

CVE-2024-21260 affects Oracle WebLogic Server (Fusion Middleware Core). The vulnerability concerns Core input handling in WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0, reported to be exploitable without authentication over T3/IIOP and capable of causing a hang or complete denial of service....

CVE-2024-21234

CVE-2024-21234 affects Oracle WebLogic Server (Oracle Fusion Middleware, Core component) and impacts versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated remote compromise via network protocols (T3, IIOP) with potential unauthorized data access; CVSS 3.1 base score 7.5 (H)...

CVE-2024-21216

CVE-2024-21216 affects Oracle WebLogic Server (Fusion Middleware core) with affected versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability enables an unauthenticated attacker who can reach the server over T3 or IIOP to execute code and potentially take over the WebLogic Server. CVSS 3.1 base scor...

CVE-2024-21215

CVE-2024-21215 affects Oracle WebLogic Server (Fusion Middleware), specifically Core component, in versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated, network-accessible exploitation (via HTTP) that can cause the server to hang or crash (complete DoS). Other sources also...

PT-2024-6823

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0 Description The issue is related to a vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware, specifically in the Core component. This vulnerability allows an...

Oracle Fusion Middleware 安全漏洞

Oracle WebLogic Server is an enterprise-class application server developed by Oracle for building and deploying multi-tier distributed applications with high performance, scalability, and reliability. Oracle WebLogic Server has a remote code execution vulnerability that can be exploited by an...

Oracle Fusion Middleware 安全漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, and other capabilities. webLogic Server is one of the application server components fo...

VulnCheck KEV: CVE-2020-14644

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution...

New Linux Malware Campaign Exploits Oracle Weblogic to Mine Cryptocurrency

Cybersecurity researchers have uncovered a new malware campaign targeting Linux environments to conduct illicit cryptocurrency mining and deliver botnet malware. The activity, which specifically singles out the Oracle Weblogic server, is designed to deliver a malware strain dubbed Hadooken,...

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to gain access to the software environment.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to the software environment by sending specially craft...

Oracle WebLogic Server (July 2024 CPU)

The 12.2.1.4.0 and 14.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2024 CPU advisory: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that a...

PT-2024-37857 · Undefined · Undefined

"Source": "CVE FEED", "Title": "CVE-2024-6765 - CVE-2021-34567: Oracle WebLogic Server Reverse HTTPProxy Denial of Service", "Content": "CVE ID : CVE-2024-6765 Published : July 17, 2024, 2:15 p.m. | 16 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CV...

CVE-2024-21183

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

CVE-2024-21181

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...