Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-36442)

Oracle WebLogic Server is a Java EE application server. An unspecified vulnerability exists in the Web Services component in Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. An attacker could exploit this vulnerability to compromise confidentiality...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-35411)

WebLogic is Oracle's JavaEE architecture based middleware for the development, integration, deployment and management of large-scale distributed Web applications, network applications and database applications. An unspecified vulnerability exists in Oracle WebLogic Server, which can be exploited ...

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2019-36444)

Oracle WebLogic Server is a Java EE application server. An unspecified vulnerability exists in the Sample apps component in Oracle WebLogic Server 12.2.1.3.0. An attacker could exploit this vulnerability to compromise confidentiality and integrity...

Oracle WebLogic Server Multiple Remote Security Vulnerabilities

Description Oracle WebLogic Server is prone to multiple remote security vulnerabilities. These vulnerabilities can be exploited over the 'HTTP' protocol. The 'Console', 'Web Services', 'EJB Container', and 'Web Services' components are affected. These vulnerabilities affect the following supporte...

Oracle WebLogic Server CVE-2019-2889 Remote Security Vulnerability

Description Oracle WebLogic Server is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Sample apps' component is affected. This vulnerability affects the following supported versions: 12.2.1.3.0 Technologies Affected Oracle Weblogic Serve...

XML Entity Injection Vulnerability in WebLogic

Oracle WebLogic is a Java EE application server. WebLogic suffers from an XML entity injection vulnerability that can be exploited by an attacker to obtain sensitive information...

Oracle October 2019 Critical Patch Update Multiple Vulnerabilities

Description Oracle has released an advance notification regarding the October 2019 Critical Patch Update CPU to be released on October 15, 2019. The update addresses 240 vulnerabilities affecting the following software: Oracle Database Server, versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c Oracl...

The WebLogic vulnerability and patch analysis-vulnerability warning-the black bar safety net

Earlier this year, researchers found and published the Oracle WebLogic in a deserialization vulnerability. This vulnerability is more serious, so Oracle breaks the normal quarterly release patches practice, specially issued an emergency update. Unfortunately, the researchers soon realized that an...

Exploit for Injection in Oracle Agile_Plm

CVE-2019-2725 WebLogic Universal Exploit - CVE-2017-3506 / CVE...

Exploit for Deserialization of Untrusted Data in Oracle Weblogic_Server

CVE-2018-2628 Weblogic GetShell.py is a Python script that exploits the Oracle Weblogic Server 10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3 deserialization remote command execution vulnerability. The script generates a payload using the ysoserial tool and sends it to the target server using a socket...

Vulnerability of the sub-component Application Container – The JavaEE application server Oracle WebLogic Server from the Oracle Fusion Middleware software platform, which allows attackers to gain control over the target system

The vulnerability of the sub-component Application Container – the JavaEE application server Oracle WebLogic Server from the Oracle Fusion Middleware software platform – is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain control over the...

The vulnerability of the WLS Core Components, a component of the Oracle WebLogic Server software from Oracle Fusion Middleware, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the WLS Core Components of the Oracle WebLogic Server component of the Oracle Fusion Middleware software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected...

CVE-2019-2856

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Application Container - JavaEE. Supported versions that are affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle...

CVE-2019-2856

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Application Container - JavaEE. Supported versions that are affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle...

CVE-2019-2827

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2019-2827

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2019-2824

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2019-2824

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Application Container - JavaEE. Supported versions that are affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle...

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...