CVE-2021-2109

Descripción Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware componente: Console. Las versiones compatibles afectadas son 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0. La vulnerabilidad fácilmente explotable permite a un atacante con altos privilegio...

Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725

CVE-2019-2725 – Oracle WebLogic の未認証リモートコード実行 Oracle Fusion Middleware の Oracle WebLogic Server コンポーネント（サブコンポーネント: Web Services）における脆弱性。影響を受けるサポート対象バージョンは 10.3.6.0.0 および 12.1.3.0.0 です。容易に悪用可能なこの脆弱性により、認証されていない攻撃者が HTTP 経由でネットワークアクセスを持つ場合、Oracle WebLogic Server を侵害することが可能です。 脆弱性概要 | CVE ID: |...

CVE-2024-21182---Oracle-WebLogic-Server-JNDI-Injection-RCE

CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE CVE-2024-21182 - Oracle WebLogic Server JNDI Injection → RCE -orange 📋 説明 CVE-2024-21182 は、Oracle WebLogic Server の Core コンポーネントに影響を与える、認証を必要としない JNDI インジェクション脆弱性です。T3 または IIOP プロトコルを介したリモートの攻撃者が、サーバー上で任意のコードを実行 RCE...

CVE-2017-10271

LAB 2 - CVE-2017-10271: WebLogic XMLDecoder 逆シリアル化（Deserialization）Writeup I. システム分析 システムログ分析 検出されたサービス: Oracle WebLogic Server（Development Mode で稼働中の basedomain に属する AdminServer）。 接続ポート: 7001。 サポート対象プロトコル: http、t3、iiop、ldap、snmp。 攻撃対象領域の評価: 当該サービスは 7001 ポートで t3 プロトコルを公開しています。このデフォルト構成は、WebLogic...

patch-CVE-2026-22024

补丁：CVE-2026-22024 漏洞详情 CVE ：CVE-2026-22024 产品 ：Oracle WebLogic Server 描述 ：反序列化漏洞 严重性 ：严重 补丁状态：已部署 字段| 值 ---|--- 补丁日期| 2026-07-01 状态| 已部署 部署位置| 生产环境 验证人员| 安全运维团队 参考 NVD CISA KEV...

CVE-2022-21445

CVE-2022-21445 エクスプロイト - PoC このツールキットは、Oracle ADF Facesを実行しているOracle WebLogic Server 12.2.1.xに影響する重大なJavaデシリアライゼーション脆弱性であるCVE-2022-21445のエクスプロイトペイロードを生成します。 この欠陥はRemoteApplicationResourceLoaderコンポーネントに存在し、攻撃者が特別に細工されたHTTP...

Oracle-WLS-Weblogic-RCE

Oracle-WLS-Weblogic-RCE CVE-2019-2725 Script de prueba RCE de Oracle WLSWeblogic RCE CVE-2019-2725 es una vulnerabilidad de deserialización en Oracle WebLogic Server. Esta vulnerabilidad de ejecución remota de código es explotable de forma remota sin autenticación. Este script que verifica la...

CVE-2020-14882

Oracle WebLogic Nicht authentifizierter RCE-Exploit Dieses PowerShell-Skript nutzt CVE-2020-14882 aus, um eine nicht authentifizierte Remote-Codeausführung auf Oracle WebLogic Server-Versionen zu erreichen: 10.3.6.0.0 12.1.3.0.0 12.2.1.3.0 12.2.1.4.0 14.1.1.0.0 Verwendung root@kitploit:...

CVE-2020-14882

Vulnerabilità RCE in WebLogic - CVE-2020-14882 Introduzione CVE-2020-14882 è una falla di esecuzione remota di codice RCE nel componente Console di Oracle WebLogic Server. Alla falla pre-autenticazione è stata assegnata una complessità di attacco "bassa" ed è stata evidenziata come "facilmente...

CVE-2020-14882_Exploit_Gui

CVE-2020-14882ExploitGui Lo strumento deve essere utilizzato solo in stato autorizzato. In caso di reati penali, gli attacchi non autorizzati non sono di mia responsabilità. Si prega di essere ben informati sulla 《网络安全法》 Durante un'attività di ricognizione, ho incontrato 14882 e non ho trovato un...

CVE-2021-2302

CVE-2021-2302 Autor: quynhle Gadget-Kette root@kitploit: javax.management.BadAttributeValueExpException.readObject oracle.security.jps.az.internal.common.principals.toString oracle.security.jps.az.internal.common.principals.getResolvedPrincipal . . . con.newInstance...

cve-2026-21962

CVE-2026-21962 — PATH-TRAVERSAL EOP / RCE AUFGRUND VON URI-NORMALISIERUNG Entdecker: gregk4sec https://github.com/gregk4sec/cve Entdeckungsdatum: 2025-09-24 Betroffener Anbieter: Oracle Betroffenes Produkt: Oracle OHS / Weblogic Server Proxy-Plug-in für Apache HTTP Server, Weblogic Server...

CVE-2026-21962_Java_GUI_Exploit_Tool

CVE-2026-21962 Java GUI Exploit Tool Oracle WebLogic Server Proxy Plug-In RCE रिमोट कोड एक्ज़ीक्यूशन भेद्यता शोषण उपकरण का Java GUI संस्करण। प्रोजेक्ट संरचना root@kitploit: java-version/ ├── pom.xml Maven प्रोजेक्ट कॉन्फ़िगरेशन फ़ाइल ├── README.md प्रोजेक्ट दस्तावेज़ीकरण ├── run.bat Windows...

Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that can result in unauthorized creation, deletion or modification access to critical data as well as unauthorized access to critical data or complete access to all Oracle HTTP Server and...

Oracle WebLogic Server Remote Takeover (August 2026 CPU) (12.2.1.4.0 / 14.1.1.0.0 / 14.1.2.0.0)

The 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0 versions of WebLogic Server installed on the remote host are affected by a vulnerability as referenced in the August 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Core Components...

Oracle WebLogic Server (August 2026 CPU)

The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of WebLogic Server installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CPU advisory. - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core...

CVE-2026-60977

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: WLS Core Components. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via RMI to compromis...

CVE-2026-60698

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise...

CVE-2026-60702

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromi...