CVE-2016-3510

CVE-2016-3510 is a remote-code-execution vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, 12.2.1.0) via deserialization in the WLS Core Components. An unauthenticated attacker can exploit a crafted serialized object (MarshalledObject) sent to the WebLogic T3 i...

CVE-2016-3586

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3510...

CVE-2016-3510

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586...

Unspecified Vulnerability in Oracle WebLogic WLS Core Component

Oracle WebLogic server is an application server platform for building and running enterprise applications and services. An unspecified vulnerability in the WLS Core component of Oracle WebLogic allows remote attackers to exploit the vulnerability to gain unauthorized access to data, modify it, an...

Unspecified Vulnerability in Oracle WebLogic WLS-Console Component

Oracle WebLogic server is an application server platform for building and running enterprise applications and services. An unspecified vulnerability in the Oracle WebLogic WLS-Console component allows remote attackers to exploit the vulnerability to make unauthorized changes to data...

CVE-2016-0577

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0574...

CVE-2016-0574

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0577...

CVE-2016-0464

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to WLS-Console...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to WLS-Console...

CVE-2016-0464

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via vectors related to WLS-Console...

CVE-2016-0577

Technical details (affected products/versions, root cause, exploitability, and fixes) for CVE-2016-0577 are not publicly provided in the connected documents. Monitor for updates.

CVE-2016-0464

CVE-2016-0464 is an unspecified vulnerability affecting Oracle WebLogic Server (Oracle Fusion Middleware) with impact limited to integrity via the WLS-Console component. Affected versions include 10.3.6, 12.1.2, and 12.1.3. The NVD entry notes an unauthenticated network access path that could aff...

The vulnerability of Oracle WebLogic Server application servers allows a hacker to execute arbitrary code.

The vulnerability of the WLS Security server component of Oracle WebLogic Server is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted Java objects transmitted over the TCP protocol,...

Code injection

The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to...

CVE-2015-4852

CVE-2015-4852 describes a remote code execution in Oracle WebLogic Server via deserialization of untrusted data in the WLS Security component. A crafted serialized Java object (via Apache Commons Collections) in T3 protocol traffic to TCP port 7001 can execute arbitrary commands. Affected version...

CVE-2015-0482

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.2.0 and 12.1.3.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to WLS-WebServices...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.2.0 and 12.1.3.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to WLS-WebServices...

CVE-2015-0482

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.2.0 and 12.1.3.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to WLS-WebServices...

CVE-2014-6534

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect integrity via vectors related to WLS Console...

CVE-2014-6534

CVE-2014-6534 affects Oracle WebLogic Server (Oracle Fusion Middleware) versions 10.0.2.0, 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0. The vulnerability is described as an unspecified issue that allows remote authenticated users to affect integrity via vectors related to the WLS Console. The conn...