Lucene search
+L

179 matches found

BDU FSTEC
BDU FSTEC
added 2023/05/02 12:0 a.m.6 views

The vulnerability of the Web Container server component of the Oracle WebLogic Server application software, which allows a hacker to disclose sensitive information and also cause service failures.

The vulnerability of the Web Container server component of the Oracle WebLogic Server application software, part of the Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, as well as...

6.4CVSS6.8AI score0.0041EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2023/04/18 8:15 p.m.21 views

CVE-2023-21956

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic...

6.1CVSS5.8AI score0.0041EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:48 a.m.8 views

SUSE CVE-2012-0551

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE 7 update 4 and earlier and 6 update 32 and earlier, and the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1, allows remote attackers to affect confidentiality and...

5.8CVSS6.5AI score0.11515EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2023/02/08 12:0 a.m.6 views

The vulnerability of the Web Container server component of the Oracle WebLogic Server application software, which allows attackers to disclose protected information

The vulnerability of the Web Container server component of the Oracle WebLogic Server application software, part of the Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

7.8CVSS7.4AI score0.00736EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.6 views

PT-2023-1308 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Web Container component of Oracle WebLogic Server, allowing an...

7.8CVSS9AI score0.00736EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2022/10/20 12:0 a.m.49 views

Oracle WebLogic Server 14.1.1 < 14.1.1.0.221010 (Oct 2022 CPU)

The version of Oracle WebLogic Server installed on the remote host is missing a security patch from the October 2022 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities, including: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware...

8.1CVSS6.9AI score0.10608EPSS
Exploits2References7
Prion
Prion
added 2022/10/18 9:15 p.m.20 views

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

3.4CVSS5.3AI score0.00237EPSS
Exploits0References1Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2022/08/19 12:0 a.m.2 views

VulnCheck KEV: CVE-2022-21371

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...

7.5CVSS6.9AI score0.92331EPSS
Exploits6References1
BDU FSTEC
BDU FSTEC
added 2022/08/08 12:0 a.m.9 views

The vulnerability of the Web Container component of the Oracle WebLogic Server application server allows a attacker to cause a service failure.

The vulnerability of the Web Container component of the Oracle WebLogic Server application lies in insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

5.7CVSS6.3AI score0.00235EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/19 10:15 p.m.7 views

CVE-2022-21557

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.7CVSS6.4AI score0.00235EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/07/19 10:15 p.m.7 views

CVE-2022-21557

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.7CVSS6.4AI score0.00235EPSS
Exploits0References1
NVD
NVD
added 2022/07/19 10:15 p.m.21 views

CVE-2022-21557

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.7CVSS0.00235EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.9 views

The vulnerability of the Web Container component of the Oracle WebLogic Server application server allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Web Container server component of Oracle WebLogic Server exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

6.1CVSS6.7AI score0.00946EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.8 views

The vulnerability of the Web Container component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Container server component of Oracle WebLogic Server is related to deficiencies in path name checking for access to restricted directories. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS6.9AI score0.92331EPSS
Exploits6References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/19 12:15 p.m.157 views

CVE-2022-21371

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

7.5CVSS6.9AI score0.92331EPSS
In wildExploits6References4Affected Software1
NVD
NVD
added 2022/01/19 12:15 p.m.23 views

CVE-2022-21371

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

7.5CVSS0.92331EPSS
Exploits6References2
OSV
OSV
added 2022/01/19 12:15 p.m.3 views

CVE-2022-21371

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

7.5CVSS6.9AI score0.92331EPSS
Exploits6References2
NVD
NVD
added 2022/01/19 12:15 p.m.19 views

CVE-2022-21386

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS0.00946EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/01/19 11:26 a.m.18 views

CVE-2022-21386

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

6.1CVSS6.1AI score0.00946EPSS
Exploits0References1
CNVD
CNVD
added 2022/01/19 12:0 a.m.95 views

Oracle WebLogic Server Input Validation Error Vulnerability (CNVD-2022-05874)

Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and...

7.5CVSS1.7AI score0.92331EPSS
Exploits6References1
Rows per page
Query Builder