Oracle

Weblogic Server

304 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2021-2294

  • EPSS 1.38%
  • Veröffentlicht 22.04.2021 22:15:16
  • Zuletzt bearbeitet 21.11.2024 06:02:49

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthe...

5

CVE-2021-2204

  • EPSS 1.35%
  • Veröffentlicht 22.04.2021 22:15:14
  • Zuletzt bearbeitet 21.11.2024 06:02:37

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthe...

4.3

CVE-2021-2211

  • EPSS 2.59%
  • Veröffentlicht 22.04.2021 22:15:14
  • Zuletzt bearbeitet 21.11.2024 06:02:38

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows unauthent...

3.5

CVE-2021-2214

  • EPSS 0.54%
  • Veröffentlicht 22.04.2021 22:15:14
  • Zuletzt bearbeitet 21.11.2024 06:02:38

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows hi...

7.5

CVE-2021-2135

  • EPSS 22.62%
  • Veröffentlicht 22.04.2021 22:15:12
  • Zuletzt bearbeitet 21.11.2024 06:02:27

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated ...

7.5

CVE-2021-2136

  • EPSS 4.8%
  • Veröffentlicht 22.04.2021 22:15:12
  • Zuletzt bearbeitet 21.11.2024 06:02:27

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated att...

5.8

CVE-2021-2142

  • EPSS 0.6%
  • Veröffentlicht 22.04.2021 22:15:12
  • Zuletzt bearbeitet 21.11.2024 06:02:28

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

5

CVE-2021-2157

  • EPSS 4.79%
  • Veröffentlicht 22.04.2021 22:15:12
  • Zuletzt bearbeitet 21.11.2024 06:02:29

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unau...

5.8

CVE-2021-29425

Exploit
  • EPSS 0.48%
  • Veröffentlicht 13.04.2021 07:15:12
  • Zuletzt bearbeitet 21.11.2024 06:01:04

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but ...

7.4

CVE-2021-3450

  • EPSS 0.69%
  • Veröffentlicht 25.03.2021 15:15:13
  • Zuletzt bearbeitet 21.11.2024 06:21:33

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly ...