CVE-2020-14756

CVE-2020-14756 WebLogic T3/IIOP RCE ExternalizableHelper.class de coherence.jar LÉAME proyecto basado en https://github.com/Y4er/CVE-2020-2555 y weblogiccmd probado en 12.2.1.4.0 y jdk 1.8.0221 Referencia 1. https://y4er.com/post/weblogic-cve-2020-14756/ 2...

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 Descripción Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware componente: Core. Las versiones compatibles afectadas son 12.2.1.4.0 y 14.1.1.0.0. Una vulnerabilidad fácilmente explotable permite que un atacante no autenticado con acceso ...

CVE-2024-21182

CVE-2024-21182 — Oracle WebLogic Server T3/IIOP JNDI注入 → 远程代码执行（实验环境） 一个自包含、单命令的Docker实验环境，用于复现并验证 Oracle WebLogic Server OpaqueReference JNDI注入漏洞家族（CVE-2024-21182，CVE-2023-21839的补丁绕过）并实现未经身份验证的远程代码执行 。 ⚠️ 仅限授权的安全研究、教育和补丁验证使用。 参见免责声明。仅针对此实验环境或您拥有的系统运行。 本实验演示的内容 CVE-2024-21182 是 Oracle WebLogic...

CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE

CVE-2024-21182 - Oracle WebLogic Server JNDI 注入 → 远程代码执行 CVE-2024-21182 - Oracle WebLogic Server JNDI 注入 → 远程代码执行 -orange 📋 描述 CVE-2024-21182 是一个未经身份验证的 JNDI 注入漏洞，影响 Oracle WebLogic Server 的 Core 组件。攻击者可通过 T3 或 IIOP 协议远程执行任意代码（RCE），从而完全获取服务器上的所有数据citation:5citation:8citation:9。 本仓库包含一个功能完整的...

CVE-2026-83260

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Event Java PX. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle Agile PLM. While the vulnerability...

CVE-2026-83066

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

CVE-2026-83008

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise...

CVE-2026-82998

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...

CVE-2026-73940

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Orac...

CVE-2026-70915

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity...

CVE-2026-70748

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

CVE-2026-70757

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

CVE-2026-70756

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

CVE-2026-83260

CVE-2026-83260 affects Oracle Agile PLM (component: Event Java PX ), version 9.3.6 . An easily exploitable vulnerability allows a high-privileged attacker with network access via T3 or IIOP to achieve full takeover of the product (CVSS 3.1: 9.1 CRITICAL ). Notably, the scope is changed , meaning ...

EUVD-2026-79394

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

CVE-2026-83066

CVE-2026-83066 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically supported versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via T3 or IIOP , potentially resulti...

EUVD-2026-79358

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise...

CVE-2026-83030

Oracle Managed File Transfer (component: MFT Runtime Server ) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via T3 or IIOP to compromise the system. Successful exploitation c...

CVE-2026-83008

Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware) contains a vulnerability in the Client Bundle component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via T3 or IIOP can exploit this to achieve full takeover of the product, imp...

EUVD-2026-79336

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise...