4192 matches found
CVE-2019-2889
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...
CVE-2019-2888
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2019-2887
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
CVE-2019-2887
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
Design/Logic Flaw
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
Design/Logic Flaw
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Design/Logic Flaw
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2019-2890
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3 to compromise Oracle...
CVE-2019-2887
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
CVE-2019-2891
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2019-2887
CVE-2019-2887 affects Oracle WebLogic Server (Web Services component) across 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability allows a low-privileged, network-authenticated attacker to access the server via HTTP and obtain unauthorized read access to a subset of WebLogic data. The issue ...
CVE-2019-2889
CVE-2019-2889 affects Oracle WebLogic Server 12.2.1.3.0 (component: Sample apps). The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the server, potentially leading to unauthorized update/insert/delete and unauthorized read access to WebLogic data. Thi...
CVE-2019-2891
CVE-2019-2891 affects the Oracle WebLogic Server Console. Affects: Oracle WebLogic Server (Fusion Middleware) versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. Root cause: a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise WebLogic Server, potentiall...
CVE-2019-2887
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
CVE-2019-2888
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: EJB Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2019-2889
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...
CVE-2019-2888
CVE-2019-2888 — Oracle WebLogic Server (EJB Container) Affected product/versions: Oracle WebLogic Server (Oracle Fusion Middleware), specifically EJB Container in versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. Root cause/impact: An unauthenticated, network-accessible attacker can exploit via HT...
CVE-2019-2890
CVE-2019-2890 affects Oracle WebLogic Server (Web Services) versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. The vulnerability arises from insecure deserialization over T3, enabling a high-privilege attacker with network access to achieve remote code execution and takeover of the WebLogic Server....
Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-36445)
Oracle WebLogic Server is a Java EE application server. An unspecified vulnerability exists in the EJB Container component in Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. An attacker could exploit this vulnerability to affect confidentiality...
Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-36443)
Oracle WebLogic Server is a Java EE application server. An unspecified vulnerability exists in the Web Services component in Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. An attacker could exploit this vulnerability to affect confidentiality, integrity, and availability...