Lucene search
+L

4210 matches found

CNNVD
CNNVD
added 2023/10/17 12:0 a.m.7 views

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more.Oracle WebLogic...

9.8CVSS6.7AI score0.00625EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/10/17 12:0 a.m.6 views

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more.Oracle WebLogic...

9.8CVSS6.7AI score0.0075EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/10/17 12:0 a.m.9 views

PT-2023-6209 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via T3, IIO...

10CVSS8.8AI score0.00705EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/10/17 12:0 a.m.8 views

PT-2023-6379 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description: The issue is related to a lack of protection for internal data in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network acces...

7.8CVSS7.1AI score0.00566EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/10/17 12:0 a.m.8 views

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more.Oracle WebLogic...

7.5CVSS6.7AI score0.00566EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/10/17 12:0 a.m.9 views

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more.Oracle WebLogic...

7.5CVSS6.7AI score0.00562EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/10/17 12:0 a.m.9 views

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more.Oracle WebLogic...

9.8CVSS6.7AI score0.00705EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/10/17 12:0 a.m.11 views

PT-2023-6174 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description: The issue is related to errors in handling input data in the Oracle WebLogic Server Core component. This can be exploited by a remote attacker to execute arbitrary cod...

9.8CVSS9.3AI score0.0075EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/10/17 12:0 a.m.7 views

PT-2023-6207 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, part of the Oracle Fusion Middleware platform. This can be...

7.8CVSS6.6AI score0.00562EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/10/17 12:0 a.m.8 views

Oracle Fusion Middleware Security Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, and more.Oracle WebLogic...

8.1CVSS6.7AI score0.00512EPSS
SaveExploits0References3
CNVD
CNVD
added 2023/08/29 12:0 a.m.53 views

Oracle WebLogic Server Deserialization Vulnerability

Oracle WebLogic Server is an Oracle Oracle application service middleware for cloud and traditional environments, which provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application...

7.5CVSS7AI score0.01184EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2023/08/25 9:15 p.m.34 views

CVE-2023-40571

weblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not verify the returned data packets, and there is a deserialization vulnerability which may lead to remote code execution. When weblogic-framework gets the command echo, it directly deserializes the...

9.8CVSS10AI score0.01184EPSS
SaveExploits0References2
Prion
Prion
added 2023/08/25 9:15 p.m.31 views

Deserialization of untrusted data

weblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not verify the returned data packets, and there is a deserialization vulnerability which may lead to remote code execution. When weblogic-framework gets the command echo, it directly deserializes the...

7.5CVSS9.8AI score0.01184EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/08/25 8:27 p.m.31 views

CVE-2023-40571 weblogic-framework Deserialization of Untrusted Data vulnerability

weblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not verify the returned data packets, and there is a deserialization vulnerability which may lead to remote code execution. When weblogic-framework gets the command echo, it directly deserializes the...

9.8CVSS9.9AI score0.01184EPSS
SaveExploits0References4
CVE
CVE
added 2023/08/25 8:27 p.m.52 views

CVE-2023-40571

The CVE-2023-40571 entry concerns the weblogic-framework tool for detecting WebLogic vulnerabilities. Versions ≤0.2.3 deserialize server-returned data without verification when processing the echo command, enabling a deserialization-focused remote code execution vector. The issue is tied to handl...

9.8CVSS10AI score0.01184EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/25 8:27 p.m.10 views

CVE-2023-40571 weblogic-framework Deserialization of Untrusted Data vulnerability

weblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not verify the returned data packets, and there is a deserialization vulnerability which may lead to remote code execution. When weblogic-framework gets the command echo, it directly deserializes the...

9.8CVSS7.8AI score0.01184EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/08/25 8:27 p.m.38 views

CVE-2023-40571 weblogic-framework Deserialization of Untrusted Data vulnerability

weblogic-framework is a tool for detecting weblogic vulnerabilities. Versions 0.2.3 and prior do not verify the returned data packets, and there is a deserialization vulnerability which may lead to remote code execution. When weblogic-framework gets the command echo, it directly deserializes the...

9.8CVSS10AI score0.01184EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/25 12:0 a.m.7 views

Oracle WebLogic Server 代码问题漏洞

Oracle WebLogic Server is an Oracle Oracle application service middleware for cloud and traditional environments, which provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application...

9.8CVSS7AI score0.01184EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/08/25 12:0 a.m.10 views

PT-2023-27516 · Unknown · Weblogic-Framework

Name of the Vulnerable Software and Affected Versions: weblogic-framework versions 0.2.3 and prior Description: The issue is related to a deserialization vulnerability that may lead to remote code execution. When the weblogic-framework receives the command echo, it directly deserializes the data...

9.8CVSS9.8AI score0.01184EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/08/01 12:0 a.m.11 views

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows a perpetrator to cause a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

4.6CVSS6.3AI score0.00553EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder