3775 matches found
CVE-2018-3246
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. Supported versions that are affected are 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2018-3213
Oracle WebLogic Server vulnerability CVE-2018-3213 affects the Docker Images subcomponent of Oracle Fusion Middleware. The issue is exploitable via network access using T3 and can lead to unauthorized access to data or complete access to Oracle WebLogic Server data. Affected versions are those pr...
CVE-2018-3252
CVE-2018-3252 affects Oracle WebLogic Server (WLS Core Components). Affected are Oracle Fusion Middleware WebLogic Server versions 10.3.6.0, 12.1.3.0, and 12.2.1.3. An unauthenticated attacker with network access via T3 can compromise the server, with potential takeover and high-impact confidenti...
CVE-2018-3191
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...
CVE-2018-3191
CVE-2018-3191 affects Oracle WebLogic Server (WLS Core Components) with affected versions 10.3.6.0, 12.1.3.0 and 12.2.1.3. The issue is described as an insecure deserialization vulnerability in the Java object deserialization pathway that can be exploited remotely and unauthenticated via T3 to ac...
CVE-2018-3252
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...
CVE-2018-3249
CVE-2018-3249 affects Oracle WebLogic Server 10.3.6.0 (WLS - Web Services). The description indicates an easily exploitable vulnerability via HTTP that can lead to unauthorized access to Oracle WebLogic Server data. Connected documents confirm related fixes were included in Oracle’s October 2018 ...
CVE-2018-3197
CVE-2018-3197 affects Oracle WebLogic Server (WLS Core Components) in version 12.1.3.0. It is a high-severity, unauthenticated remote vulnerability exploitable over T3 that can lead to takeover of the WebLogic server. Documented CVSSv3.0 base score is 9.8 (C/H/I/A) with network access and no user...
CVE-2018-3248
Oracle WebLogic Server 10.3.6.0 (WLS – Web Services) is affected by CVE-2018-3248. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the server; successful attacks require user interaction from a person other than the attacker and can result in unauth...
CVE-2018-3201
CVE-2018-3201 affects Oracle WebLogic Server (Fusion Middleware) specifically the WLS Core Components in version 12.2.1.3. The vulnerability allows an unauthenticated attacker with network access via T3 to compromise WebLogic Server, potentially resulting in a takeover of the server (high/critica...
CVE-2018-2902
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Console. Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Serve...
CVE-2018-3246
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. Supported versions that are affected are 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
CVE-2018-3245
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...
CVE-2018-3201
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. The supported version that is affected is 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server...
CVE-2018-3248
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...
CVE-2018-3249
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...
CVE-2018-3250
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...
CVE-2018-3191
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise...
CVE-2018-3246
CVE-2018-3246 affects Oracle WebLogic Server (Fusion Middleware), specifically the Web Services subcomponent (WLS - Web Services). The vulnerability is exploitable remotely by an unauthenticated attacker over HTTP and targets affected versions 12.1.3.0 and 12.2.1.3, potentially leading to unautho...
CVE-2018-3248
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS - Web Services. The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...