CVE-2010-0073

CVE-2010-0073 maps to Oracle WebLogic Server Node Manager remote command execution. Multiple Oracle WebLogic versions (notably 10.3.2 and earlier 7.0 SP7, 8.1 SP6, 9.x, 10.0) are affected. The connected documents describe an unauthenticated, network-accessible RCE vulnerability where Node Manager...

Oracle WebLogic Server Node Manager 'beasvc.exe' Remote Command Execution Vulnerability

Oracle WebLogic Server is prone to a remote command-execution vulnerability because the software fails to restrict access to sensitive commands. Successful attacks can compromise the affected software and possibly the computer. Oracle WebLogic Server 10.3.2 is vulnerable; other versions may also ...

Oracle WebLogic Server Detection (HTTP)

HTTP based detection of Oracle WebLogic Server. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle WebLogic Server Node Manager 'beasvc.exe' RCE Vulnerability

Oracle WebLogic Server is prone to a remote command execution RCE vulnerability because the software fails to restrict access to sensitive commands. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Oracle Releases Security Alert for WebLogic Server Vulnerability

Oracle has released a security alert to address a vulnerability in Oracle WebLogic Server. Exploitation of this vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands on an affected system. US-CERT encourages users and administrators to review the Oracle security...

Oracle Ships Critical Out-of-Band Security Patch

Oracle has released an out-of-band patch to fix a gaping security hole in the Oracle WebLogic Node Manager and, warning that an attacker could launch remote attacks over a network without the need for a username and password. The patch follows the public release of exploit code as part of the...

Oracle BEA WebLogic Server Plug-ins Certificate Buffer Overflow (CVE-2009-1016)

There exists a buffer overflow vulnerability in BEA WebLogic Server Plugins. The vulnerability is due to a boundary error while parsing SSL certificates. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted certificate to the target host. In an attack case where...

Oracle WebLogic Server beasvc.exe服务远程命令执行漏洞

No description provided by source...

Oracle WebLogic Server Node Manager Remote Command Execution

The version of Node Manager listening on this port allows unauthenticated, remote attackers to execute arbitrary commands with system privileges. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid44316; scriptversion"1.18"; scriptcveid"CVE-2010-0073";...

Oracle WebLogic Server Node Manager Detection

The remote service is Node Manager, a utility included with Oracle WebLogic Server and used to remotely start and stop Administration Server and Managed Server instances. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

CVE-2010-0074

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0078

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0069

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP1, and 10.3.0 allows remote attackers to affect integrity via unknown vectors...

Code injection

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP1, and 10.3.0 allows remote attackers to affect integrity via unknown vectors...

Code injection

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors...

Code injection

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0068

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors...

Code injection

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors...

CVE-2010-0068

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors...

CVE-2010-0074

CVE-2010-0074 concerns the WebLogic Server component of the BEA Product Suite. Per the BEA Product Suite risk matrix, affected releases include BEA WebLogic Server 7.0 through 10.3.1 (specifically 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.1). The description notes an unspecified vulnera...