Lucene search
+L

3774 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•5 views

CVE-2021-2109: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP...

7.2CVSS5.7AI score0.70447EPSS
SaveExploits7References1
CNVD
CNVD
•added 2021/01/20 12:00 a.m.•28 views

Oracle Weblogic Remote Code Execution Vulnerability

Oracle WebLogic Server is a cloud-native, enterprise-grade Java platform application server for multi-tier distributed enterprise application development and deployment. Oracle Weblogic remote code execution vulnerability. An attacker can exploit this vulnerability to construct a malicious reques...

7.2CVSS9.8AI score0.70447EPSS
SaveExploits7References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•4 views

CVE-2021-1996: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic...

3.5CVSS5.7AI score0.01366EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•4 views

CVE-2021-1995: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic...

6.5CVSS5.7AI score0.01497EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•5 views

CVE-2021-1994: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic...

9.8CVSS5.7AI score0.05469EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/01/20 12:00 a.m.•4 views

PT-2021-1781

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.3.0 Oracle WebLogic Server version 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core Components of...

10CVSS5.8AI score0.03804EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/01/20 12:00 a.m.•3 views

PT-2021-1904

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.1.3.0.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue exists due to insufficient input validation in the Core Components of Oracle WebLogic Server, allowing a remote...

4.3CVSS5.9AI score0.01682EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•4 views

PT-2021-1709

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 12.1.3.0.0 Description The issue is related to insufficient access control in the Core Components of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP, T3 protocols to...

9.8CVSS0.03728EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•4 views

PT-2021-6422

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description The issue exists due to insufficient input validation in a component of Oracle WebLogic Server. This allows a remote attacker to disclose protected information and impac...

6.1CVSS0.01013EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•30 views

Oracle Fusion Middleware Component Access Control Error Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...

4.3CVSS5.8AI score0.01682EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•4 views

PT-2021-1910

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 12.1.3.0.0 Description The issue is related to insufficient access control in the Web Services component of Oracle WebLogic Server, allowing a high-privileged attacker with network access via...

3.5CVSS0.01366EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•25 views

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...

9.8CVSS7.3AI score0.03804EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•2 views

PT-2021-1706

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 14.1.1.0.0 Description The issue is related to the Samples component of Oracle WebLogic Server and is caused by inadequate access control. It allows an unauthenticated attacker with network...

10CVSS0.03804EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•25 views

Oracle Fusion Middleware WebLogic Server Security Vulnerability

Oracle WebLogic Server is an Oracle application services middleware for cloud and traditional environments that provides a modern, lightweight development platform, supports application lifecycle management from development to production, and simplifies application deployment and management. A...

9.8CVSS7.3AI score0.05469EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•25 views

Oracle Fusion Middleware Component Authorization Issues Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...

9.8CVSS5.8AI score0.03728EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•4 views

PT-2021-1707

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 14.1.1.0.0 Description The issue is related to insufficient access control in the Console component of Oracle WebLogic Server, allowing a remote attacker to gain full control over the...

9CVSS6.1AI score0.70447EPSS
SaveExploits7References19
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•22 views

Oracle Fusion Middleware WebLogic Server Authorization Issues Vulnerability

Oracle WebLogic Server is an Oracle application services middleware for cloud and traditional environments that provides a modern, lightweight development platform that supports the full lifecycle management of applications from development to production and simplifies application deployment and...

9.8CVSS7.2AI score0.03728EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•17 views

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...

9.8CVSS7.3AI score0.03804EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•4 views

PT-2021-1909

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 12.1.3.0.0 Description The issue is related to insufficient access control in the Web Services component of Oracle WebLogic Server, allowing a remote attacker to modify, add, or delete data vi...

6.8CVSS6.1AI score0.01497EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•4 views

PT-2021-1710

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server version 12.1.3.0.0 Description The issue is related to insufficient access control in the Core Components of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP and T3 protocols to...

10CVSS5.8AI score0.03728EPSS
SaveExploits0References6
Rows per page
Query Builder