CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3801 matches found

Rapid7 Vulnerability Database (full)•added 2020/07/15 12:00 a.m.•8 views

CVE-2020-14639: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Sample apps. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

7.5CVSS5.8AI score0.02249EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2020/07/15 12:00 a.m.•10 views

CVE-2020-14588: Undefined Security Weakness

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi...

8.2CVSS7.2AI score0.01706EPSS

SaveExploits0References1

Positive Technologies•added 2020/07/14 12:00 a.m.•3 views

PT-2020-3453

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6.0.0 through 14.1.1.0.0 Description The issue is related to insufficient access control in the Core component of Oracle WebLogic Server, allowing a high-privileged attacker with network access via HTTP to...

6.8CVSS0.01451EPSS

SaveExploits0References4

Positive Technologies•added 2020/07/14 12:00 a.m.•2 views

PT-2020-3452

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue is related to insufficient access control in the Core component of Oracle WebLogic Server, allowing an unauthenticate...

10CVSS0.09886EPSS

SaveExploits0References5

Tenable Nessus•added 2020/07/02 12:00 a.m.•213 views

Oracle WebLogic Server Java Object Deserialization RCE (CVE-2020-2883)

Binary data oracleweblogicservercve20202883.nbin...

9.8CVSS8.3AI score0.94582EPSS

SaveExploits11References2

Packet Storm•added 2020/06/04 12:00 a.m.•391 views

WebLogic Server Deserialization Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WebLogic Server Deserialization RCE BadAttributeValueExpException ExtComp', 'Description' = %q There exists a Java object deserialization...

7.5CVSS8.3AI score0.94582EPSS

SaveExploits11

BDU FSTEC•added 2020/06/02 12:00 a.m.•22 views

Core server component Full Control

The vulnerability of the Core server component of Oracle WebLogic Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application through the IIOP and T3 network protocols...

10CVSS8.4AI score0.94582EPSS

SaveExploits11References5Affected Software1

BDU FSTEC•added 2020/06/02 12:00 a.m.•20 views

Oracle WebLogic Server Console Component Data Manipulation

The vulnerability of the Console component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP network protocol...

4.3CVSS5.8AI score0.0116EPSS