CVE-2016-0464

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to WLS-Console...

CVE-2016-0572

Technical details for CVE-2016-0572 are not publicly available in the provided documents. No concrete affected products, versions, or root cause are disclosed here. Monitor for updates from official advisories and vendor advisories.

CVE-2016-0573

CVE-2016-0573 affects Oracle WebLogic Server (Oracle Fusion Middleware) in versions 10.3.6, 12.1.2, 12.1.3, and 12.2.1, through the WebLogic Server WLS Java Messaging Service. The connected IBM bulletin explicitly references CVE-2016-0573 for IBM OpenPages GRC Platform with Application Server and...

CVE-2016-0464

CVE-2016-0464 is an unspecified vulnerability affecting Oracle WebLogic Server (Oracle Fusion Middleware) with impact limited to integrity via the WLS-Console component. Affected versions include 10.3.6, 12.1.2, and 12.1.3. The NVD entry notes an unauthenticated network access path that could aff...

CVE-2016-0573

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Java Messaging Service...

CVE-2016-0574

CVE-2016-0574 affects Oracle WebLogic Server in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 via the WLS Core Components. The connected documents confirm a remote-exploit impact on confidentiality, integrity, and availability, but do not provide the exact root cause details or a sp...

CVE-2016-0577

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0574...

CVE-2016-0572: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Coherence Container...

CVE-2016-0574: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0577...

CVE-2016-0573: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Java Messaging Service...

CVE-2016-0577: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0574...

CVE-2016-0464: Undefined Security Weakness

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to WLS-Console...

Oracle WebLogic Server Multiple Vulnerabilities (January 2016 CPU)

Binary data oracleweblogicservercpujan2016.nbin...

PT-2016-4328

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6, 12.1.2, 12.1.3, and 12.2.1 Description The issue affects confidentiality, integrity, and availability. It is related to WLS Core Components. Recommendations For versions 10.3.6, 12.1.2, 12.1.3, and 12.2....

PT-2016-4324

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6, 12.1.2, 12.1.3, and 12.2.1 Description The issue affects confidentiality, integrity, and availability, and is related to vectors involving the WLS Java Messaging Service. Recommendations For versions...

PT-2016-4230

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6, 12.1.2, 12.1.3 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via vectors related to WLS-Console. Recommendations For Oracle WebLogic Server version...

PT-2016-4323

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6, 12.1.2, 12.1.3, and 12.2.1 Description The issue affects confidentiality, integrity, and availability. It is related to Coherence Container, but the specific vectors are unknown. Recommendations For...

PT-2016-4325

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 10.3.6, 12.1.2, 12.1.3, and 12.2.1 Description The issue affects confidentiality, integrity, and availability. It is related to WLS Core Components. Recommendations For versions 10.3.6, 12.1.2, 12.1.3, and 12.2....

Oracle WebLogic Server Java Object Deserialization RCE (Local Check)

Binary data oracleweblogicservercve20154852.nbin...

Oracle WebLogic Apache Commons library deserialization vulnerability

Added: 11/20/2015 CVE: CVE-2015-4852 BID: 77539 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Apache Commons is a widely used Java library which is included in WebLogic Server. Problem A vulnerability in the Apache Commons library used by Oracl...