Lucene search
+L

2955 matches found

CNNVD
CNNVD
added 2023/01/18 12:0 a.m.9 views

Oracle WebLogic Server 安全漏洞

Oracle WebLogic Server is an Oracle Oracle application service middleware for cloud and traditional environments, which provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application...

7.5CVSS6.6AI score0.00736EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/01/18 12:0 a.m.6 views

Oracle WebLogic Server 安全漏洞

Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and...

7.5CVSS9.3AI score0.99811EPSS
SaveExploits11References4
CNVD
CNVD
added 2023/01/18 12:0 a.m.44 views

Oracle WebLogic Server Remote Code Execution Vulnerability (CNVD-2023-04389)

Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and...

7.5CVSS3AI score0.99811EPSS
SaveExploits11References1
CNNVD
CNNVD
added 2023/01/18 12:0 a.m.11 views

Oracle WebLogic Server 安全漏洞

Oracle WebLogic Server is an Oracle Oracle application service middleware for cloud and traditional environments, which provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application...

7.5CVSS6.5AI score0.00949EPSS
SaveExploits1References2
CVE
CVE
added 2023/01/17 11:35 p.m.96 views

CVE-2023-21842

CVE-2023-21842 affects Oracle WebLogic Server (Web Container) with versions 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The root cause is insufficient input validation in the Web Container that enables an unauthenticated, network-accessible attacker (HTTP) to compromise the server, potentially leading...

7.5CVSS7.1AI score0.00736EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/01/17 11:35 p.m.102 views

CVE-2023-21837

CVE-2023-21837 - Oracle WebLogic Server (Core) vulnerability : Affected versions are 12.2.1.3.0–12.2.1.4.0 and 14.1.1.0.0. The issue arises from insufficient input validation in the Core component, exploitable by an unauthenticated attacker over IIOP to disclose or potentially access sensitive da...

7.5CVSS7.1AI score0.00949EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2023/01/17 11:35 p.m.121 views

CVE-2023-21838

The CVE-2023-21838 entry affects Oracle WebLogic Server (Fusion Middleware Core) with versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. The issue is due to insufficient input validation in the Core component, allowing an unauthenticated attacker with network access via T3 or IIOP to trigger a hang...

7.5CVSS7.1AI score0.00857EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/01/17 11:35 p.m.808 views

CVE-2023-21839

CVE-2023-21839 affects Oracle WebLogic Server (core) versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. It is exploitable via unauthenticated network access over T3/IIOP and relates to post-deserialization of a ForeignOpaqueReference object, enabling remote code execution as the oracle user. Multip...

7.5CVSS7.5AI score0.99811EPSS
SaveIn wildExploits11References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.6 views

PT-2023-1308 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Web Container component of Oracle WebLogic Server, allowing an...

7.8CVSS9AI score0.00736EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.5 views

PT-2023-1310 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, part of the Oracle...

7.8CVSS8.9AI score0.00949EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.5 views

PT-2023-1311 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an...

7.8CVSS9AI score0.00736EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.8 views

PT-2023-1309 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an...

7.8CVSS8.8AI score0.00857EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.9 views

PT-2023-1295

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.3.0 through 12.2.1.4.0 Oracle WebLogic Server version 14.1.1.0.0 Description The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an...

7.8CVSS7.4AI score0.99811EPSS
SaveExploits11References54
Check Point Advisories
Check Point Advisories
added 2022/10/31 12:0 a.m.37 views

Oracle WebLogic Server Remote Code Execution (CVE-2021-2394)

A remote code execution vulnerability exists in Oracle WebLogic Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

10CVSS5.5AI score0.76567EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2022/10/20 12:0 a.m.55 views

Oracle WebLogic Server (Oct 2022 CPU)

The version of Oracle WebLogic Server installed on the remote host is missing a security patch from the October 2022 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities, including: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware...

8.1CVSS7.1AI score0.10608EPSS
SaveExploits2References8
Tenable Nessus
Tenable Nessus
added 2022/10/20 12:0 a.m.50 views

Oracle WebLogic Server 14.1.1 < 14.1.1.0.221010 (Oct 2022 CPU)

The version of Oracle WebLogic Server installed on the remote host is missing a security patch from the October 2022 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities, including: - Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware...

8.1CVSS6.9AI score0.10608EPSS
SaveExploits2References7
ATTACKERKB
ATTACKERKB
added 2022/10/18 9:15 p.m.11 views

CVE-2022-21616

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.2CVSS6.7AI score0.00237EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/10/18 9:15 p.m.18 views

CVE-2022-21616

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.2CVSS0.00237EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/18 9:15 p.m.9 views

CVE-2022-21616

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

5.2CVSS5.8AI score0.00237EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/18 9:15 p.m.21 views

Design/Logic Flaw

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracl...

3.4CVSS5.3AI score0.00237EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder