Lucene search
+L

2505 matches found

Cvelist
Cvelist
•added 2022/10/18 12:00 a.m.•34 views

CVE-2022-21616

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.2CVSS5.7AI score0.00246EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/18 12:00 a.m.•5 views

CVE-2022-21616: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.2CVSS5.7AI score0.00246EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/10/18 12:00 a.m.•15 views

Oracle Fusion Middleware和Oracle WebLogic Server 安全漏洞

Oracle Fusion Middleware Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more.Oracle WebLogic...

5.2CVSS6.8AI score0.00246EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/10/18 12:00 a.m.•4 views

PT-2022-14989

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue allows a high privileged attacker with logon to the infrastructure where Oracle WebLogic Server executes to compromis...

5.2CVSS5.7AI score0.00246EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2022/10/05 12:00 a.m.•145 views

Oracle Primavera P6 Enterprise Project Portfolio Management (Jul 2022 CPU)

The versions of Primavera P6 Enterprise Project Portfolio Management installed on the remote host are affected by a vulnerability as referenced in the July 2022 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Centralized Third Party Jars...

7.5CVSS6.7AI score0.0486EPSS
SaveExploits1References3
hivepro
hivepro
•added 2022/09/22 8:24 a.m.•32 views

Kinsing malware continues to exploit these two-year-old vulnerabilities

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Malicious actors are exploiting these two-year-old remote code execution vulnerabilities in Oracle WebLogic Server to deploy Kinsing malware...

5.9AI score
SaveExploits0
CISA KEV Catalog
CISA KEV Catalog
•added 2022/09/08 12:00 a.m.•30 views

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server...

9.8CVSS8.3AI score0.99958EPSS
SaveIn wildExploits72
VulnCheck KEV
VulnCheck KEV
•added 2022/09/08 12:00 a.m.•18 views

VulnCheck KEV: CVE-2018-2628

Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server...

9.8CVSS8.3AI score0.99958EPSS
SaveIn wildExploits72References4
BDU FSTEC
BDU FSTEC
•added 2022/09/05 12:00 a.m.•23 views

The vulnerability of the Web Services sub-component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, allows attackers to cause service failures.

The vulnerability of the Web Services sub-component of the Oracle WebLogic Server application server within the Oracle Fusion Middleware software platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using...

5.3CVSS6.3AI score0.01032EPSS
SaveExploits0References3Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2022/08/19 12:00 a.m.•10 views

VulnCheck KEV: CVE-2022-21371

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

7.5CVSS6.7AI score0.92649EPSS
SaveIn wildExploits6References4
BDU FSTEC
BDU FSTEC
•added 2022/08/18 12:00 a.m.•19 views

The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to gain access to modify, add, or delete data, or cause partial service disruption.

The vulnerability of the Core server component of Oracle WebLogic Server exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to remotely gain access to modify, add, or delete data, or cause a partial service outage using the IIOP and T3...

6.5CVSS6.5AI score0.00855EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/08/08 12:00 a.m.•18 views

The vulnerability of the Core server component of Oracle WebLogic Server allows a attacker to trigger a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

5.3CVSS6.3AI score0.01032EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/08/08 12:00 a.m.•18 views

The vulnerability of the Web Container component of the Oracle WebLogic Server application server allows a attacker to cause a service failure.

The vulnerability of the Web Container component of the Oracle WebLogic Server application lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

5.7CVSS6.3AI score0.00235EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2022/07/20 12:00 a.m.•537 views

Oracle WebLogic Server (Jul 2022 CPU)

The version of Oracle WebLogic Server installed on the remote host is missing a security patch from the July 2022 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities, including: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware...

9.8CVSS7.1AI score0.99638EPSS
SaveExploits111References18
OSV
OSV
•added 2022/07/19 10:15 p.m.•11 views

CVE-2022-21564

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise...

5.3CVSS6.7AI score0.01032EPSS
SaveExploits0References1
OSV
OSV
•added 2022/07/19 10:15 p.m.•18 views

CVE-2022-21557

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.7CVSS6.4AI score0.00235EPSS
SaveExploits0References1
OSV
OSV
•added 2022/07/19 10:15 p.m.•17 views

CVE-2022-21560

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

5.3CVSS6.3AI score0.01032EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/07/19 10:15 p.m.•16 views

CVE-2022-21560

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

5.3CVSS6.4AI score0.01032EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2022/07/19 10:15 p.m.•18 views

CVE-2022-21557

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.7CVSS6.4AI score0.00235EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2022/07/19 10:15 p.m.•14 views

CVE-2022-21548

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

6.5CVSS6.6AI score0.00855EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder