7.5

CVE-2017-10271

Warnung
Medienbericht
Exploit
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Weblogic Server Version10.3.6.0.0
Oracle ≫ Weblogic Server Version12.1.3.0.0
Oracle ≫ Weblogic Server Version12.2.1.1.0
Oracle ≫ Weblogic Server Version12.2.1.2.0

10.02.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

Schwachstelle

Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 99.99% 1
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
01.04.2026 09:30
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
Patch
Vendor Advisory
http://www.securitytracker.com/id/1039608
Third Party Advisory
Broken Link
VDB Entry
http://www.securityfocus.com/bid/101304
Third Party Advisory
Broken Link
VDB Entry
https://github.com/c0mmand3rOpSec/CVE-2017-10271
Exploit
https://www.exploit-db.com/exploits/43458/
Third Party Advisory
Exploit
VDB Entry
https://www.exploit-db.com/exploits/43924/
Third Party Advisory
Exploit
VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-10271
US Government Resource