CVE-2019-2648

CVE-2019-2648 affects Oracle WebLogic Server (WLS - Web Services) in Oracle Fusion Middleware. Affected versions: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0. The vulnerability enables unauthenticated, network-based access via HTTP to compromise the server and potentially access or exfiltrate data (C: HIG...

Oracle WebLogic Server Multiple Vulnerabilities (Apr 2019 CPU)

The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities: - An unspecified vulnerability in the Spring Framework allows a low privileged, remote attacker with network access via HTTP to compromise and takeover the Oracle Communications Unified...