3003 matches found
CVE-2021-1994
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Services. Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic...
CVE-2021-1996
CVE-2021-1996 affects Oracle WebLogic Server (Oracle Fusion Middleware, Web Services component). Affected versions include 10.3.6.0.0 and 12.1.3.0.0. The issue allows a high-privilege attacker with network access via HTTP to compromise the server, with human interaction required and potential una...
CVE-2021-1995
CVE-2021-1995 affects Oracle WebLogic Server (Oracle Fusion Middleware) - Web Services component. Connected sources confirm affected versions: 10.3.6.0.0 and 12.1.3.0.0. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to compromise WebLogic Server, potentially en...
Oracle Weblogic Remote Code Execution Vulnerability
Oracle WebLogic Server is a cloud-native, enterprise-grade Java platform application server for multi-tier distributed enterprise application development and deployment. Oracle Weblogic remote code execution vulnerability. An attacker can exploit this vulnerability to construct a malicious reques...
Oracle Fusion Middleware WebLogic Server Authorization Issues Vulnerability
Oracle WebLogic Server is an Oracle application services middleware for cloud and traditional environments that provides a modern, lightweight development platform that supports the full lifecycle management of applications from development to production and simplifies application deployment and...
Oracle Fusion Middleware Component Authorization Issues Vulnerability
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...
Oracle Fusion Middleware Component Security Vulnerability
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...
Oracle Fusion Middleware Component Access Control Error Vulnerability
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...
Oracle Fusion Middleware Security Vulnerability
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...
Oracle Fusion Middleware WebLogic Server Security Vulnerability
Oracle WebLogic Server is an Oracle application services middleware for cloud and traditional environments that provides a modern, lightweight development platform, supports application lifecycle management from development to production, and simplifies application deployment and management. A...
Oracle Fusion Middleware Component Access Control Error Vulnerability
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...
Oracle Fusion Middleware Security Vulnerability
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, and other capabilities.WebLogic Server is one of the application server components for both cloud...
Oracle WebLogic Server Multiple Vulnerabilities (Jan 2018 CPU)
The version of WebLogic Server installed on the remote host is affected by multiple vulnerabilities as referenced in the January 2018 CPU advisory, as follows: - Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported versi...
Exploit for CVE-2020-2883
what's this This project which based weblogiccmd is a poc for...
Oracle WebLogic Server Administration Console Handle Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle WebLogic Server Administration Console Handle RCE', 'Description' = %q This module exploits a path traversal and a Java class instantiatio...
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
简易说明 + 命令执行并回显 + 直接上传shell + linux下weblogic 10.3.6.0测试OK...
Exploit for OS Command Injection in Oracle Weblogic_Server
What is this? This is a poc of CVE-2017-3506Weblogic XMLD...
The vulnerability of the Console component of the Oracle WebLogic Server application server allows a attacker to gain full control over the application.
The vulnerability of the Console component of the Oracle WebLogic Server application lies in insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain full control over the application using the HTTP protocol...
The vulnerability of the Web Services component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.
The vulnerability of the Web Services component of the Oracle WebLogic Server application server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or...