CVE-2022-21260

CVE-2022-21260 affects Oracle WebLogic Server (Samples component) in versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows an attacker to compromise WebLogic Server over HTTP with network access; exploitation is described as easily exploitable and requires user interaction, potentially imp...

CVE-2022-21259

CVE-2022-21259 refers to a vulnerability in the Oracle WebLogic Server, specifically the Samples component. Affected products/versions are Oracle WebLogic Server 12.2.1.4.0 and 14.1.1.0.0. The flaw can be exploited by an unauthenticated attacker over HTTP, with user interaction required for the a...

CVE-2022-21259

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Samples. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

CVE-2022-21259

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Samples. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

CVE-2022-21258

CVE-2022-21258 affects Oracle WebLogic Server (Fusion Middleware) in the Samples component, version 14.1.1.0.0. The vulnerability allows an unauthenticated, network-accessible attacker to compromise WebLogic via HTTP with UI interaction required from a user, potentially enabling unauthorized upda...

CVE-2022-21258

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Samples. The supported version that is affected is 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful...

CVE-2022-21257

CVE-2022-21257 affects Oracle WebLogic Server (Fusion Middleware) in the Samples component for versions 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker with network access via HTTP can compromise WebLogic Server; attacks may read/modify data and impact data integrity. CVSS v3.1 base score ...

CVE-2022-21257

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Samples. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

CVE-2022-21257

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Samples. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

CVE-2022-21252

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Samples. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

CVE-2022-21252

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Samples. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

CVE-2022-21252

CVE-2022-21252 is an Oracle WebLogic Server vulnerability, affecting the Samples component in Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.1.0.0. The issue allows an unauthenticated attacker, over HTTP, to compromise WebLogic Server, enabling unauthorized update/insert/delete oper...

PT-2022-2137

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 14.1.1.0.0 Description The issue exists due to insufficient input validation in a component of Oracle WebLogic Server. Exploitation can allow a remote attacker to impact the confidentiality and integrity of...

PT-2022-2119

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description The issue exists due to insufficient input validation in a component of Oracle WebLogic Server. This allows a remote attacker to compromise the server via HTTP,...

Oracle WebLogic Server Input Validation Error Vulnerability (CNVD-2022-05873)

Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and...

Oracle WebLogic Server Input Validation Error Vulnerability (CNVD-2022-05874)

Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and...

CVE-2022-21347: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...

PT-2022-2134

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description A vulnerability in the Oracle WebLogic Server product exists due to insufficient input validation in the Samples component. This easily exploitable issue allows an...

Oracle Primavera Unifier (Jan 2022 CPU)

The version of Primavera Unifier installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2022 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Platform, Data Persistence OWASP Java HTML...

PT-2022-2138

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description The issue exists due to insufficient input validation in the Samples component of Oracle WebLogic Server, allowing a remote attacker to impact the confidentiality and...