Oracle Releases Security Alert for WebLogic Server Vulnerability

Oracle has released a security alert to address a vulnerability in Oracle WebLogic Server. Exploitation of this vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands on an affected system. US-CERT encourages users and administrators to review the Oracle security...

Oracle WebLogic Server Node Manager Detection

The remote service is Node Manager, a utility included with Oracle WebLogic Server and used to remotely start and stop Administration Server and Managed Server instances. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

Oracle WebLogic Server beasvc.exe服务远程命令执行漏洞

No description provided by source...

Oracle WebLogic Server Node Manager Remote Command Execution

The version of Node Manager listening on this port allows unauthenticated, remote attackers to execute arbitrary commands with system privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid44316; scriptversion"1.18"; scriptcveid"CVE-2010-0073";...

CVE-2010-0078

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0074

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0069

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP1, and 10.3.0 allows remote attackers to affect integrity via unknown vectors...

Code injection

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors...

Code injection

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors...

Code injection

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors...

Code injection

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP1, and 10.3.0 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-0068

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors...

CVE-2010-0068

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors...

CVE-2010-0078

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0069

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP1, and 10.3.0 allows remote attackers to affect integrity via unknown vectors...

CVE-2010-0074

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0068

CVE-2010-0068 affects BEA WebLogic Server (BEA Product Suite) versions 9.0, 9.1, 9.2 MP2, 10.0. The vulnerability is remote, exploitable via HTTP/Web Services, and impacts confidentiality (partial). No exploit details provided in the initial documents. Remediation is via Oracle January 2010 Criti...

CVE-2010-0078

CVE-2010-0078 affects BEA WebLogic Server in the BEA Product Suite (versions 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.1). The vulnerability is described as unspecified and could allow a remote attacker to affect availability via unknown vectors. The connected CPU/patch context indicates Oracle’s January...

CVE-2010-0069

CVE-2010-0069 is a BEA WebLogic Server vulnerability affecting BEA Product Suite components (7.0 SP7, 8.1 SP6, 9.0–9.2 MP3, 10.0 MP1, 10.3.0). The connected CVE records indicate an unspecified remote vulnerability that could affect integrity via unknown vectors. The Oracle CPU/CPUJan2010 advisory...

CVE-2010-0074

CVE-2010-0074 concerns the WebLogic Server component of the BEA Product Suite. Per the BEA Product Suite risk matrix, affected releases include BEA WebLogic Server 7.0 through 10.3.1 (specifically 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.1). The description notes an unspecified vulnera...