CVE-2016-0700

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675...

CVE-2016-0675

CVE-2016-0675 concerns Oracle WebLogic Server Console component vulnerabilities in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3. The connected sources describe an unspecified vulnerability in the Console subcomponent that yields no confidentiality impact but partial integrity impact (and n...

CVE-2016-0638

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Messaging Service...

CVE-2016-0696

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6 allows remote attackers to affect confidentiality and integrity via vectors related to Console...

CVE-2016-0675

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0700...

CVE-2016-0688

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to Core Components...

CVE-2016-0696

CVE-2016-0696 affects Oracle WebLogic Server Console in Oracle Fusion Middleware 10.3.6. The vulnerability is described as unspecified, with partial confidentiality and partial integrity impact, and no availability impact. The Core/Console components are implicated; no exploit details are provide...

CVE-2016-3416

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality and integrity via vectors related to Console...

CVE-2016-0638

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Messaging Service...

CVE-2016-0638

CVE-2016-0638 affects Oracle WebLogic Server in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1. The vulnerability lies in the Java Messaging Service component and allows remote attackers to impact confidentiality, integrity, and availability (C/P/I) via network vectors. The CVSS v3 b...

CVE-2016-0675

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0700...

CVE-2016-0696

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6 allows remote attackers to affect confidentiality and integrity via vectors related to Console...

CVE-2016-0700

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Console, a different vulnerability than CVE-2016-0675...

CVE-2016-0688

CVE-2016-0688 is an unspecified vulnerability in Oracle WebLogic Server Core Components within Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3. The connected IBM bulletin classifies this CVE under the WebLogic Server Core Components entry and notes a CVSS base score of 7.5 with no confidentia...

CVE-2016-3416

CVE-2016-3416 is an unspecified vulnerability in the Oracle WebLogic Server Console component of Oracle Fusion Middleware, listed for affected versions 10.3.6, 12.1.2, 12.1.3, and 12.2.1. The issue allows remote attackers to affect confidentiality and integrity via Console-related vectors. NVD re...

CVE-2016-0700

CVE-2016-0700 is described as an unspecified vulnerability in Oracle Fusion Middleware WebLogic Server Console component (affecting Oracle WebLogic Server 10.3.6, 12.1.2, 12.1.3) that can allow remote attackers to impact confidentiality and integrity. The CVSS v3 base score is 6.1 with a vector o...

Fix weblogic JAVA deserialization vulnerability of a variety of methods-vulnerability warning-the black bar safety net

The current oracle is also not in the publicly released weblogic JAVA deserialization vulnerability official patch currently see the repair method is nothing more than two: Use SerialKiller replace the sequence of operation of the ObjectInputStream class; In does not affect the business case, the...

WebLogic Server Encoded Request Directory Listing

The version of WebLogic Server running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, via a crafted request, to display a listing of an arbitrary directory, which may contain sensitive files. Note that this...

用友某系统存在命令执行（泄露大量信息包含财务）

简要描述： 用友某系统存在命令执行（泄露大量信息包含财务） 详细说明： http://www.yonyougov.com:7001 weblogic （反序列化） 就截三张图吧 里面东西太乱，有好几个站点 好有好多备份文件。 漏洞证明：...

PayPal Java Serialization Vulnerability

A Java serialization vulnerability disclosed more than a year ago figured to have a long shelf life. It lived in popular Java application development frameworks such as Apache Commons Collections—where it’s been patched—and not to mention widely deployed application servers such as Oracle WebLogi...