Oracle Fusion WebLogic Server Component WLS-Console Management Interface Unspecified XSS

The version of the WebLogic component on Oracle Middleware installed on the remote Windows host is affected an unspecified cross-site scripting vulnerability related to WLS-Console. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted URL, resulting in the...

Oracle Fusion Middleware WebLogic Detection (credentialed check)

Oracle WebLogic, a Java EE application, is installed on the remote host as an Oracle Fusion Middleware component. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid57793; scriptversion"1.10"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/02/01";...

Oracle Fusion Middleware WebLogic Component DoS

The version of the WebLogic component on Oracle Middleware installed on the remote host is affected by an unspecified vulnerability related to the Web Container affecting availability. Successful exploitation of this vulnerability could cause a denial of service condition. %NASLMINLEVEL 70300 C...

Oracle WebLogic Server vulnerable to cross-site scripting

Overview Oracle WebLogic Server contains a cross-site scripting vulnerability. Oracle WebLogic Server contains a cross-site scripting vulnerability on the management console. Minetoshi Takizawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

JVN#54779201: Oracle WebLogic Server vulnerable to cross-site scripting

Oracle WebLogic Server contains a cross-site scripting vulnerability on the management console. Impact An arbitrary script may be executed on the browser of the user who is logged into the administration console of Oracle WebLogic Server. Solution Update the Software Apply the latest update...

CVE-2012-0077

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote authenticated users to affect integrity, related to WLS-Console...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote attackers to affect availability via unknown vectors related to Web Container...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote authenticated users to affect integrity, related to WLS-Console...

CVE-2012-0077

CVE-2012-0077 affects Oracle WebLogic Server in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5, related to the WLS-Console. Multiple connected sources confirm a cross-site scripting vulnerability in the WebLogic management console, enabling an arbitrary script to execute in th...

CVE-2011-3566

CVE-2011-3566 is described as an unspecified vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware) affecting versions 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5. The initial description indicates the issue could affect availability and is related to the Web Container, with remote atta...

CVE-2012-0077

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote authenticated users to affect integrity, related to WLS-Console...

CVE-2011-3566

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4, 10.0.2, 10.3.3, 10.3.4, and 10.3.5 allows remote attackers to affect availability via unknown vectors related to Web Container...

Oracle WebLogic Portal Elevation of Privilege (CVE-2008-5462)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified privilege elevation vulnerability in the portal component that could be exploited remotely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Oracle WebLogic Server Web Services Security Policy not Enforced (CVE-2008-5459)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified vulnerability that could allow a remote, unauthenticated attacker to disable enforcement of security policies for the web services. Such an attack could have a...

Oracle WebLogic Plugins Unspecified Remote Issue (CVE-2008-2579)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host may be affected by an unspecified remote vulnerability. Note that this issue affects the WebLogic plug-ins for Apache, Sun and IIS Web included with WebLogic Server and is only exploitable if o...

Oracle WebLogic Multiple Authorizer Unspecified Privilege Escalation (CVE-2008-4009)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified privilege escalation vulnerability that can occur for some resources when the server is configured with more than one authorizer, such as a XACMLAuthorizer and a...

Oracle WebLogic JSP Pages Unspecified Information Disclosure (CVE-2008-2580)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified information disclosure vulnerability in JSP pages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Oracle WebLogic Admin State Unspecified Privilege Escalation (CVE-2008-4011)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified privilege escalation vulnerability such that some applications in admin state are made available to non-admin users. %NASLMINLEVEL 70300 C Tenable Network Security...

Oracle WebLogic Server Servlets Unspecified Unauthenticated Remote Issue (CVE-2008-4013)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified vulnerability that may allow protected webapps to be displayed under certain conditions. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Oracle WebLogic Server Unspecified Information Disclosure (CVE-2008-2578)

According to its self-reported banner, the version of Oracle WebLogic Server running on the remote host is affected by an unspecified, local information disclosure vulnerability in the WebLogic console or server log. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...