CVE-2020-14756

CVE-2020-14756 WebLogic T3/IIOP RCE ExternalizableHelper.class of coherence.jar README 프로젝트는 https://github.com/Y4er/CVE-2020-2555 및 weblogiccmd를 기반으로 함 12.2.1.4.0 및 JDK 1.8.0221에서 테스트됨 참고 자료 1. https://y4er.com/post/weblogic-cve-2020-14756/ 2. https://mp.weixin.qq.com/s/E-4wjbKD-iSi0CEMegVmZQ...

CVE-2024-21006

CVE-2024-21006 CVE-2024-21006 설명 Oracle Fusion Middleware의 Oracle WebLogic Server 제품 취약점 구성 요소: Core. 영향을 받는 지원 버전은 12.2.1.4.0 및 14.1.1.0.0입니다. 쉽게 악용 가능한 취약점으로, 네트워크 접근이 가능하고 인증되지 않은 공격자가 T3, IIOP를 통해 Oracle WebLogic Server를 손상시킬 수 있습니다. 이 취약점의 성공적인 공격은 중요 데이터에 대한 무단 접근 또는 Oracle WebLogic Server가...

CVE-2024-21182

CVE-2024-21182 — Oracle WebLogic Server T3/IIOP JNDIインジェクション → RCE ラボ Oracle WebLogic ServerのOpaqueReference JNDIインジェクション脆弱性ファミリー（CVE-2024-21182、CVE-2023-21839のパッチバイパス）を再現・検証 し、認証なしのリモートコード実行 に変換する、自己完結型のワンコマンドDockerラボです。 ⚠️ 許可されたセキュリティ研究、教育、パッチ検証のみを目的としています。...

CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE

CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE -orange 📋 설명 CVE-2024-21182 는 Oracle WebLogic Server의 Core 구성 요소에 영향을 미치는 인증되지 않은 JNDI 인젝션 취약점입니다. 공격자가 T3 또는 IIOP 프로토콜을 통해 원격으로 임의 코드를 실행RCE할 수 있으며, 서버의 모든 데이터에 대한 완전한 접근 권한을...

CVE-2026-83260

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Event Java PX. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows high privileged attacker with network access via T3, IIOP to compromise Oracle Agile PLM. While the vulnerability...

CVE-2026-83066

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

CVE-2026-83008

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise...

CVE-2026-82998

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware component: Messaging Enabler. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Servi...

CVE-2026-73940

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware component: Authentication Engine. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Orac...

CVE-2026-70915

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Identity...

CVE-2026-70748

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

CVE-2026-70757

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

CVE-2026-70756

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

CVE-2026-83260

CVE-2026-83260 affects Oracle Agile PLM (component: Event Java PX ), version 9.3.6 . An easily exploitable vulnerability allows a high-privileged attacker with network access via T3 or IIOP to achieve full takeover of the product (CVSS 3.1: 9.1 CRITICAL ). Notably, the scope is changed , meaning ...

EUVD-2026-79394

Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware component: OID LDAP Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle...

CVE-2026-83066

CVE-2026-83066 affects the OID LDAP Server component of Oracle Internet Directory (Oracle Fusion Middleware), specifically supported versions 12.2.1.4.0 and 14.1.2.1.0 . The vulnerability is easily exploitable by an unauthenticated attacker with network access via T3 or IIOP , potentially resulti...

EUVD-2026-79358

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise...

CVE-2026-83030

Oracle Managed File Transfer (component: MFT Runtime Server ) in Oracle Fusion Middleware versions 12.2.1.4.0 and 14.1.2.0.0 is affected by an easily exploitable vulnerability allowing a low-privileged attacker with network access via T3 or IIOP to compromise the system. Successful exploitation c...

CVE-2026-83008

Oracle WebCenter Enterprise Capture (part of Oracle Fusion Middleware) contains a vulnerability in the Client Bundle component, affecting versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via T3 or IIOP can exploit this to achieve full takeover of the product, imp...

EUVD-2026-79336

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise...