3774 matches found
CVE-2019-2890
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3 to compromise Oracle...
CVE-2019-2891
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2019-2889
CVE-2019-2889 affects Oracle WebLogic Server 12.2.1.3.0 (component: Sample apps). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the server, potentially leading to unauthorized update/insert/delete and unauthorized read access to WebLogic data. Thi...
CVE-2019-2891
CVE-2019-2891 affects the Oracle WebLogic Server Console. Affects: Oracle WebLogic Server (Fusion Middleware) versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. Root cause: a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server, potentiall...
CVE-2019-2887
CVE-2019-2887 affects Oracle WebLogic Server (Web Services component) across 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability allows a low-privileged, network-authenticated attacker to access the server via HTTP and obtain unauthorized read access to a subset of WebLogic data. The issue ...
CVE-2019-2887
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
CVE-2019-2887
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
CVE-2019-2890
CVE-2019-2890 affects Oracle WebLogic Server (Web Services) versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability arises from insecure deserialization over T3, enabling a high-privilege attacker with network access to achieve remote code execution and takeover of the WebLogic Server....
CVE-2019-2888
CVE-2019-2888 — Oracle WebLogic Server (EJB Container) Affected product/versions: Oracle WebLogic Server (Oracle Fusion Middleware), specifically EJB Container in versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. Root cause/impact: An unauthenticated, network-accessible attacker can exploit via HT...
CVE-2019-2889
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...
CVE-2019-2888
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2019-2888: Undefined Security Weakness
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-36444)
Oracle WebLogic Server is a Java EE application server. An unspecified vulnerability exists in the Sample apps component in Oracle WebLogic Server 12.2.1.3.0. An attacker could exploit this vulnerability to compromise confidentiality and integrity...
CVE-2019-2887: Undefined Security Weakness
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
CVE-2019-2889: Undefined Security Weakness
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...
CVE-2019-2891: Undefined Security Weakness
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-36442)
Oracle WebLogic Server is a Java EE application server. An unspecified vulnerability exists in the Web Services component in Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. An attacker could exploit this vulnerability to compromise confidentiality...
CVE-2019-2890: Undefined Security Weakness
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3 to compromise Oracle...
Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-35411)
WebLogic is Oracle's JavaEE architecture based middleware for the development, integration, deployment and management of large-scale distributed Web applications, network applications and database applications. An unspecified vulnerability exists in Oracle WebLogic Server, which can be exploited ...
Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-36445)
Oracle WebLogic Server is a Java EE application server. An unspecified vulnerability exists in the EJB Container component in Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. An attacker could exploit this vulnerability to affect confidentiality...