Lucene search
K

27 matches found

Positive Technologies
Positive Technologies
added 2 days ago5 views

PT-2026-49882

Vulnerability in the WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise WebLogic Server. Successful...

8.8CVSS5.3AI score0.00479EPSS
Exploits0References2
OSV
OSV
added 2025/10/21 8:20 p.m.3 views

CVE-2025-61752

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Oracle WebLogic Server...

7.5CVSS5.8AI score0.00332EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:0 a.m.2 views

The vulnerability of the Core server component of Oracle WebLogic Server allows a attacker to trigger a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using network T3/IIOP protocols...

7.8CVSS7.6AI score0.00682EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/16 12:0 a.m.3 views

PT-2024-1145 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via HTT...

8.6CVSS7.9AI score0.00503EPSS
Exploits0References12
Positive Technologies
Positive Technologies
added 2023/10/17 12:0 a.m.4 views

PT-2023-6209 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0 Description: The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via T3, IIO...

10CVSS8.8AI score0.00705EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2023/08/01 12:0 a.m.3 views

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to gain access to modify, add, or delete data, or to cause a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to modify, add, or delete data, or cause service failures...

7.7CVSS6.9AI score0.00542EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/04 12:0 a.m.3 views

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to disclose sensitive information and also cause service failures.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, as well as cause service failures...

7.8CVSS6.7AI score0.00421EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/04 12:0 a.m.1 views

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an attacker to disclose sensitive information and also cause service failures.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information, as well as cause service failures...

7.8CVSS7.2AI score0.00634EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/08 12:0 a.m.1 views

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows attackers to disclose protected information.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

7.8CVSS7.4AI score0.00949EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.4 views

The vulnerability of the Core server component of Oracle WebLogic Server allows a attacker to trigger a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using network T3/IIOP protocols...

7.8CVSS6.9AI score0.01265EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/15 12:0 a.m.3 views

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

5.3CVSS7.2AI score0.01646EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2021/04/20 12:0 a.m.4 views

Oracle WebLogic Server 输入验证错误漏洞

Oracle WebLogic Server is a cloud-native, enterprise-grade Java platform application server for multi-tier distributed enterprise application development and deployment. A security vulnerability exists in the Core component of Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0,...

6.5CVSS5.6AI score0.01297EPSS
Exploits0References6
CNVD
CNVD
added 2020/01/15 12:0 a.m.3 views

Unspecified Vulnerability in Oracle WebLogic Server (CNVD-2020-08163)

Oracle Fusion Middleware, the digital business platform for enterprise and cloud computing, is a comprehensive family of middleware products that enable organizations to create and run agile, intelligent business applications and maximize IT efficiencies by leveraging modern hardware and software...

7.2CVSS6.6AI score0.01937EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/07/25 12:0 a.m.4 views

The vulnerability of the WLS Core Components, a component of the Oracle WebLogic Server software from Oracle Fusion Middleware, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the WLS Core Components of the Oracle WebLogic Server component of the Oracle Fusion Middleware software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected...

10CVSS7.8AI score0.02055EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2019/07/17 12:0 a.m.3 views

Oracle WebLogic Server Component Access Control Error Vulnerability (CNVD-2019-27102)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections, etc. WebLogic Server is one of the application server components for cloud and traditional...

5.5CVSS6.8AI score0.01259EPSS
Exploits0References1
OSV
OSV
added 2019/04/23 7:32 p.m.3 views

CVE-2019-2615

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

4.9CVSS6.1AI score
Exploits0References1
CNVD
CNVD
added 2019/04/17 12:0 a.m.3 views

Oracle WebLogic Server Component Information Disclosure Vulnerability (CNVD-2019-27110)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

4.9CVSS6.8AI score0.06395EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2018/11/09 12:0 a.m.4 views

The vulnerability of the WLS Core Components of the Oracle WebLogic Server application server allows a hacker to execute arbitrary code.

The vulnerability of the WLS Core Components component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the T3 network protocol from a remote location...

10CVSS8.3AI score0.03333EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/09 12:0 a.m.4 views

The vulnerability of the WLS Core Components of the Oracle WebLogic Server application server allows a hacker to gain full control over the application.

The vulnerability of the WLS Core Components component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain full control over the application, using the T3 network protocol...

10CVSS7.8AI score0.94281EPSS
Exploits3References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/09 12:0 a.m.6 views

The vulnerability of the WLS Core Components of the Oracle WebLogic Server application server allows a hacker to execute arbitrary code.

The vulnerability of the WLS Core Components component of the Oracle WebLogic Server application server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the T3 network protocol from a remote location...

10CVSS8.3AI score0.61699EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder