3011 matches found
Design/Logic Flaw
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Management Services. The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...
CVE-2020-2963
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via IIOP, T3 to...
CVE-2020-2963
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via IIOP, T3 to...
CVE-2020-2867
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-2883
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to...
CVE-2020-2867
CVE-2020-2867 affects Oracle WebLogic Server Web Container in Oracle Fusion Middleware for versions 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to potentially modify or read data, with CVSS 3.0 base score 8.2 (Impact: ...
CVE-2020-2883
CVE-2020-2883 is an Oracle WebLogic Server deserialization vulnerability (Core) that allows unauthenticated remote code execution over network access via IIOP/T3, potentially taking over the WebLogic server. Affected Oracle Fusion Middleware WebLogic versions include 10.3.6.0.0, 12.1.3.0.0, 12.2....
CVE-2020-2867
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2020-2869
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...
CVE-2020-2884
CVE-2020-2884 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. Affected versions are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability enables unauthenticated remote compromise over IIOP/T3, with the potential takeover of WebLogic Server (high/critical impact ...
CVE-2020-2828
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Web Services. The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server...
CVE-2020-2829
CVE-2020-2829 affects Oracle WebLogic Server (Fusion Middleware), specifically the Management Services component in version 10.3.6.0.0. The vulnerability enables a high-privilege attacker with network access over HTTP to compromise WebLogic Server, potentially exposing or breaching data. Public r...
CVE-2020-2829
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Management Services. The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...
CVE-2020-2829
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Management Services. The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...
CVE-2020-2828
CVE-2020-2828 affects Oracle WebLogic Server (WLS Web Services component) with affected version 10.3.6.0.0. Exploitation is possible over network via IIOP/T3, enabling an unauthenticated attacker to compromise the server and potentially access or exfiltrate data. The CVSSv3.1 base score is 7.5 (H...
CVE-2020-2811
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...
CVE-2020-2811
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...
CVE-2020-2811
Oracle WebLogic Server Console vulnerability (CVE-2020-2811) affects supported 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. An unauthenticated attacker with network access via HTTP can compromise WebLogic Server, with human interaction required for exploitation. Impact includes unauthorized...
CVE-2020-2798
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via IIOP, T...
CVE-2020-2801
CVE-2020-2801 affects Oracle WebLogic Server (Core) across 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. The vulnerability allows an unauthenticated attacker with network access via IIOP or T3 to take over the WebLogic Server. The issue’s patch addresses the vulnerability only if the WLS ins...