PT-2016-5441

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6, 12.1.2, 12.1.3, and 12.2.1 Description The issue affects confidentiality and integrity, allowing remote attackers to exploit it via vectors related to Console. Recommendations For versions 10.3.6, 12.1.2...

CVE-2016-0638: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Messaging Service...

CVE-2016-0700: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675...

CVE-2016-0696: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6 allows remote attackers to affect confidentiality and integrity via vectors related to Console...

PT-2016-4357

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6, 12.1.2, and 12.1.3 Description The issue affects confidentiality and integrity, and it is related to the Console component in Oracle WebLogic Server. Recommendations For versions 10.3.6, 12.1.2, and...

PT-2016-4379

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6, 12.1.2, and 12.1.3 Description The issue affects confidentiality and integrity, and it is related to the Console component in Oracle WebLogic Server. Recommendations For versions 10.3.6, 12.1.2, and...

CVE-2016-0688: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components...

WebLogic Server Encoded Request Directory Listing

The version of WebLogic Server running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, via a crafted request, to display a listing of an arbitrary directory, which may contain sensitive files. Note that this...

CVE-2016-0577

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0574...

CVE-2016-0574

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0577...

CVE-2016-0573

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Java Messaging Service...

CVE-2016-0572

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Coherence Container...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0574...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0577...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Coherence Container...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Java Messaging Service...

CVE-2016-0464

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to WLS-Console...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to WLS-Console...

CVE-2016-0572

Technical details for CVE-2016-0572 are not publicly available in the provided documents. No concrete affected products, versions, or root cause are disclosed here. Monitor for updates from official advisories and vendor advisories.

CVE-2016-0574

CVE-2016-0574 affects Oracle WebLogic Server in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 via the WLS Core Components. The connected documents confirm a remote-exploit impact on confidentiality, integrity, and availability, but do not provide the exact root cause details or a sp...