Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

2983 matches found

RedhatCVE
RedhatCVE•added 2024/10/16 10:27 a.m.•26 views

CVE-2024-21260

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS6.7AI score0.00711EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2024/10/16 10:26 a.m.•27 views

CVE-2024-21234

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS6.8AI score0.00698EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE•added 2024/10/16 10:26 a.m.•32 views

CVE-2024-21216

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

9.8CVSS7.6AI score0.0071EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE•added 2024/10/16 9:57 a.m.•23 views

CVE-2024-21274

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

7.5CVSS6.7AI score0.00653EPSS
SaveExploits0References1
CNVD
CNVD•added 2024/10/16 12:0 a.m.•25 views

Oracle WebLogic Server Remote Code Execution Vulnerability (CNVD-2024-40886)

Oracle WebLogic Server is an enterprise-class application server developed by Oracle for building and deploying multi-tier distributed applications with high performance, scalability, and reliability. Oracle WebLogic Server has a remote code execution vulnerability that can be exploited by an...

9.8CVSS8.2AI score0.0071EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC•added 2024/10/16 12:0 a.m.•28 views

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to gain full access to the vulnerable software.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to errors in processing input data. Exploiting this vulnerability allows an attacker, operating remotely, to gain full access to the vulnerable software by sending...

10CVSS7.6AI score0.0071EPSS
SaveExploits0References2Affected Software1
NVD
NVD•added 2024/10/15 8:15 p.m.•30 views

CVE-2024-21274

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serve...

7.5CVSS0.00653EPSS
SaveExploits0References1
NVD
NVD•added 2024/10/15 8:15 p.m.•31 views

CVE-2024-21260

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS0.00711EPSS
SaveExploits0References1
OSV
OSV•added 2024/10/15 8:15 p.m.•4 views

CVE-2024-21260

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS5.8AI score0.00711EPSS
SaveExploits0References1
OSV
OSV•added 2024/10/15 8:15 p.m.•9 views

CVE-2024-21234

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS5.8AI score0.00698EPSS
SaveExploits0References1
NVD
NVD•added 2024/10/15 8:15 p.m.•25 views

CVE-2024-21234

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

7.5CVSS0.00698EPSS
SaveExploits0References1
OSV
OSV•added 2024/10/15 8:15 p.m.•10 views

CVE-2024-21215

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

7.5CVSS5.8AI score0.00646EPSS
SaveExploits0References1
NVD
NVD•added 2024/10/15 8:15 p.m.•36 views

CVE-2024-21215

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server...

7.5CVSS0.00646EPSS
SaveExploits0References1
OSV
OSV•added 2024/10/15 8:15 p.m.•6 views

CVE-2024-21216

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic...

9.8CVSS5.8AI score0.0071EPSS
SaveExploits0References1
CVE
CVE•added 2024/10/15 7:52 p.m.•71 views

CVE-2024-21274

CVE-2024-21274 affects Oracle WebLogic Server (Console component) in 12.2.1.4.0 and 14.1.1.0.0. The issue allows an unauthenticated, network-accessible attacker via HTTP to cause a hang or a frequent crash (complete DoS) of WebLogic Server. Root cause: improper handling of resources during input ...

7.5CVSS7.2AI score0.00653EPSS
SaveExploits0References1Affected Software1
CVE
CVE•added 2024/10/15 7:52 p.m.•68 views

CVE-2024-21260

CVE-2024-21260 affects Oracle WebLogic Server (Fusion Middleware Core). The vulnerability concerns Core input handling in WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0, reported to be exploitable without authentication over T3/IIOP and capable of causing a hang or complete denial of service....

7.5CVSS7.1AI score0.00711EPSS
SaveExploits0References1Affected Software1
CVE
CVE•added 2024/10/15 7:52 p.m.•65 views

CVE-2024-21234

CVE-2024-21234 affects Oracle WebLogic Server (Oracle Fusion Middleware, Core component) and impacts versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated remote compromise via network protocols (T3, IIOP) with potential unauthorized data access; CVSS 3.1 base score 7.5 (H)...

7.5CVSS7.2AI score0.00698EPSS
SaveExploits0References1Affected Software1
CVE
CVE•added 2024/10/15 7:52 p.m.•110 views

CVE-2024-21216

CVE-2024-21216 affects Oracle WebLogic Server (Fusion Middleware core) with affected versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability enables an unauthenticated attacker who can reach the server over T3 or IIOP to execute code and potentially take over the WebLogic Server. CVSS 3.1 base scor...

9.8CVSS9.5AI score0.0071EPSS
SaveExploits0References1Affected Software1
CVE
CVE•added 2024/10/15 7:52 p.m.•96 views

CVE-2024-21215

CVE-2024-21215 affects Oracle WebLogic Server (Fusion Middleware), specifically Core component, in versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated, network-accessible exploitation (via HTTP) that can cause the server to hang or crash (complete DoS). Other sources also...

7.5CVSS7.2AI score0.00646EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies•added 2024/10/15 12:0 a.m.•10 views

PT-2024-6926 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 through 12.2.1.4.0 Oracle WebLogic Server versions 14.1.1.0.0 through 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server. Th...

7.8CVSS8.1AI score0.00711EPSS
SaveExploits0References7
Rows per page
Query Builder