Lucene search
+L

4213 matches found

NCSC
NCSC
added 2024/10/17 1:19 p.m.62 views

Vulnerabilities fixed in Oracle Fusion Middleware

Oracle has fixed vulnerabilities in Fusion Middleware components, such as WebLogic Server, WebCenter and HTTP Server. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Manipulation of data - Execution...

10CVSS7.7AI score0.99569EPSS
SaveExploits25References1
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:0 a.m.9 views

The vulnerability of the Core server component of Oracle WebLogic Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using network T3/IIOP protocols...

7.8CVSS7.6AI score0.00698EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:0 a.m.10 views

The vulnerability of the Core server component of Oracle WebLogic Server allows a attacker to trigger a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures using the HTTP protocol...

7.8CVSS7.6AI score0.00646EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:0 a.m.8 views

The vulnerability of the Core server component of Oracle WebLogic Server allows a attacker to trigger a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using network T3/IIOP protocols...

7.8CVSS7.6AI score0.00711EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/10/17 12:0 a.m.149 views

Oracle WebLogic Server (October 2024 CPU)

The 12.2.1.4.0 and 14.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2024 CPU advisory: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions tha...

9.8CVSS6.6AI score0.01939EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2024/10/16 10:27 a.m.27 views

CVE-2024-21260

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS6.7AI score0.00711EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/10/16 10:26 a.m.27 views

CVE-2024-21234

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS6.8AI score0.00698EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/10/16 10:26 a.m.32 views

CVE-2024-21216

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

9.8CVSS7.6AI score0.0071EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2024/10/16 10:26 a.m.34 views

CVE-2024-21215

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

7.5CVSS6.7AI score0.00646EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/10/16 9:57 a.m.23 views

CVE-2024-21274

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

7.5CVSS6.7AI score0.00653EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/10/16 12:0 a.m.25 views

Oracle WebLogic Server Remote Code Execution Vulnerability (CNVD-2024-40886)

Oracle WebLogic Server is an enterprise-class application server developed by Oracle for building and deploying multi-tier distributed applications with high performance, scalability, and reliability. Oracle WebLogic Server has a remote code execution vulnerability that can be exploited by an...

9.8CVSS8.2AI score0.0071EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/16 12:0 a.m.28 views

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to gain full access to the vulnerable software.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to errors in processing input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain full access to the vulnerable software by sending...

10CVSS7.6AI score0.0071EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/10/15 8:15 p.m.30 views

CVE-2024-21274

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

7.5CVSS0.00653EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/15 8:15 p.m.7 views

CVE-2024-21274

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

7.5CVSS5.8AI score0.00653EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/15 8:15 p.m.32 views

CVE-2024-21260

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS0.00711EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/15 8:15 p.m.5 views

CVE-2024-21260

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS5.8AI score0.00711EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/15 8:15 p.m.9 views

CVE-2024-21234

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS5.8AI score0.00698EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/15 8:15 p.m.25 views

CVE-2024-21234

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS0.00698EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/15 8:15 p.m.10 views

CVE-2024-21215

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

7.5CVSS5.8AI score0.00646EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/15 8:15 p.m.36 views

CVE-2024-21215

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

7.5CVSS0.00646EPSS
SaveExploits0References1
Rows per page
Query Builder