Lucene search
+L

2955 matches found

ATTACKERKB
ATTACKERKB
added 2021/10/20 11:17 a.m.1 views

CVE-2021-35620

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

7.5CVSS7.1AI score0.01446EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/20 11:17 a.m.4 views

CVE-2021-35617

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Coherence Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP...

9.8CVSS7.2AI score0.02008EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/10/20 11:16 a.m.10 views

CVE-2021-35552

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Diagnostics. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

5.3CVSS6.7AI score0.0105EPSS
SaveExploits0References1
NVD
NVD
added 2021/10/20 11:16 a.m.17 views

CVE-2021-35552

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Diagnostics. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

5.3CVSS0.0105EPSS
SaveExploits0References1
Prion
Prion
added 2021/10/20 11:16 a.m.27 views

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Diagnostics. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

5CVSS5.2AI score0.0105EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/10/20 10:50 a.m.14 views

CVE-2021-35620

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

7.5CVSS6.6AI score0.01446EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/20 10:50 a.m.77 views

CVE-2021-35620

CVE-2021-35620 affects Oracle WebLogic Server (Oracle Fusion Middleware, Core) with affected versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows an unauthenticated attacker to remotely exploit via T3 to cause a hang or frequent, repeatable crashes (a c...

7.5CVSS7.7AI score0.01446EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/20 10:50 a.m.23 views

CVE-2021-35620

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to...

7.5CVSS7.9AI score0.01446EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/10/20 10:50 a.m.13 views

CVE-2021-35617

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Coherence Container. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP...

9.8CVSS7.5AI score0.02008EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/20 10:50 a.m.82 views

CVE-2021-35617

CVE-2021-35617 affects Oracle WebLogic Server (Coherence Container). Affected versions: 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. The issue allows unauthenticated, network-access via IIOP to compromise WebLogic Server, with potential full takeover (impacting confidentiality, integrity a...

9.8CVSS9.3AI score0.02008EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/10/20 10:50 a.m.79 views

CVE-2021-35552

CVE-2021-35552 affects Oracle WebLogic Server (Fusion Middleware), in the Diagnostics component. Affects 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker with network access via HTTP can compromise WebLogic Server, potentially allowing unauthorized update/insert/delete of data. ...

5.3CVSS5.6AI score0.0105EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/20 10:50 a.m.23 views

CVE-2021-35552

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Diagnostics. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

5.3CVSS5.9AI score0.0105EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/10/20 12:0 a.m.16 views

Oracle Fusion Middleware and Oracle WebLogic Server Input Validation Error Vulnerability (CNVD-2022-33111)

Oracle Fusion Middleware Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, etc. Oracle WebLogic Serve...

9.8CVSS6.4AI score0.02008EPSS
SaveExploits0References1
NCSC
NCSC
added 2021/10/20 12:0 a.m.107 views

Vulnerabilities fixed in Oracle Fusion Middleware

Oracle has fixed vulnerabilities in the following Oracle Fusion Middleware products: HTTP Server BAM Business Activity Monitoring WebCenter Portal Business Intelligence Enterprise Edition Real-Time Decision Server Data Integrator Outside In Technology WebLogic Server Enterprise Repository...

9.8CVSS7.7AI score0.99019EPSS
SaveExploits15
CNNVD
CNNVD
added 2021/10/19 12:0 a.m.5 views

Oracle Fusion Middleware和Oracle WebLogic Server 输入验证错误漏洞

Oracle Fusion Middleware Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, etc. Oracle WebLogic Serve...

9.8CVSS5.6AI score0.02008EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/10/19 12:0 a.m.4 views

Oracle Fusion Middleware和Oracle WebLogic Server 输入验证错误漏洞

Oracle Fusion Middleware Oracle Fusion Middleware and Oracle WebLogic Server are both products of Oracle Corporation.Oracle Fusion Middleware is a business innovation platform for enterprise and cloud environments. The platform provides middleware, software collections, etc. Oracle WebLogic Serve...

7.5CVSS7.7AI score0.01446EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/10/19 12:0 a.m.5 views

Oracle WebLogic Server 输入验证错误漏洞

Oracle WebLogic Server is an Oracle application services middleware for cloud and traditional environments that provides a modern, lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application deployment an...

5.3CVSS6.8AI score0.0105EPSS
SaveExploits0References5
VulnCheck KEV
VulnCheck KEV
added 2021/10/07 12:0 a.m.7 views

VulnCheck KEV: CVE-2021-2135

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Coherence Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

9.8CVSS7.1AI score0.0837EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/09/07 12:0 a.m.8 views

The vulnerability of the Admin Console console for Oracle WebLogic Server applications allows attackers to execute cross-site scripting attacks.

The vulnerability of the Admin Console console of Oracle WebLogic Server applications relates to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.8CVSS5.2AI score0.0497EPSS
SaveExploits2References7Affected Software1
The Hacker News
The Hacker News
added 2021/08/23 1:27 p.m.457 views

Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems

Close to 14 million Linux-based systems are directly exposed to the Internet, making them a lucrative target for an array of real-world attacks that could result in the deployment of malicious web shells, coin miners, ransomware, and other trojans. That's according to an in-depth look at the Linu...

10CVSS9.4AI score0.99999EPSS
SaveExploits251
Rows per page
Query Builder