CVE-2016-5531

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS-WebServices...

CVE-2016-3505

CVE-2016-3505 affects Oracle WebLogic Server (Oracle Fusion Middleware) 10.3.6.0, 12.1.3.0, and 12.2.1.0. The issue lies in the JavaServer Faces subcomponent and allows remote authenticated attackers to impact confidentiality, integrity, and availability via JSF-related vectors. Documented impact...

CVE-2016-5488

CVE-2016-5488 affects Oracle WebLogic Server (10.3.6.0, 12.1.3.0) in the Web Container subcomponent. The connected data describes an unspecified flaw in the Web Container that allows an unauthenticated, remote attacker to cause a denial of service, impacting availability. No specific root cause, ...

CVE-2016-3505

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to JavaServer Faces...

CVE-2016-5535

Oracle WebLogic Server (Oracle Fusion Middleware) is affected by CVE-2016-5535 due to unsafe deserialization in the WLS Security component, leading to remote code execution via unauthenticated Java objects in Apache Commons File Upload. Affected product versions include WebLogic Server 10.3.6.0, ...

CVE-2016-5488

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-3445...

CVE-2016-5535

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-5535: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2016-5531: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS-WebServices...

PT-2016-5525

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, and 12.2.1.0 Description The issue affects confidentiality, integrity, and availability. It is related to JavaServer Faces and can be exploited by remote authenticated users. Recommendations...

PT-2016-6520

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1 Description The issue affects confidentiality, integrity, and availability. It is related to the deserialization of untrusted data, which can lead to remote code...

PT-2016-6478

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0 through 12.1.3.0 Description The issue allows remote attackers to affect availability via vectors related to Web Container. Recommendations For versions 10.3.6.0 and 12.1.3.0, at the moment, there is no...

CVE-2016-5601: Improper Access Control

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows local users to affect confidentiality and integrity via vectors related to CIE Related Components...

CVE-2016-3505: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to JavaServer Faces...

CVE-2016-5488: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-3445...

PT-2016-6516

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, and 12.2.1.0 Description The issue affects confidentiality, integrity, and availability. It is related to vectors concerning WLS-WebServices in the Oracle WebLogic Server component of Oracle...

PT-2016-6576

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0 through 12.2.1.1 Description The issue affects confidentiality and integrity, and it is related to CIE Related Components. Recommendations For versions 12.1.3.0 through 12.2.1.1, at the moment, there is...

BSA-2016-012

Security Advisory ID : BSA-2016-012 Component : BEA WebLogic Revision : 2.0: Final The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to...

Unspecified Vulnerability in Oracle Fusion Middleware Oracle WebLogic Server Component (CNVD-2016-10057)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

Unspecified Vulnerability in Oracle Fusion Middleware WebLogic Server Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...