Oracle

Weblogic Server

322 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2020-2548

  • EPSS 0.85%
  • Veröffentlicht 15.01.2020 17:15:16
  • Zuletzt bearbeitet 21.11.2024 05:25:30

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows high privileged attacker with network acce...

4.3

CVE-2020-2519

  • EPSS 1.25%
  • Veröffentlicht 15.01.2020 17:15:15
  • Zuletzt bearbeitet 21.11.2024 05:25:26

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated ...

9.8

CVE-2019-20330

  • EPSS 8.64%
  • Veröffentlicht 03.01.2020 04:15:12
  • Zuletzt bearbeitet 21.11.2024 04:38:16

FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.

9.8

CVE-2019-17571

Medienbericht
  • EPSS 69.06%
  • Veröffentlicht 20.12.2019 17:15:11
  • Zuletzt bearbeitet 28.05.2026 19:16:31

Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic fo...

6.1

CVE-2019-10219

  • EPSS 2.17%
  • Veröffentlicht 08.11.2019 15:15:11
  • Zuletzt bearbeitet 07.07.2025 14:15:21

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

4.3

CVE-2019-2887

  • EPSS 1.18%
  • Veröffentlicht 16.10.2019 18:15:26
  • Zuletzt bearbeitet 21.11.2024 04:41:44

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker...

5.3

CVE-2019-2888

  • EPSS 5.22%
  • Veröffentlicht 16.10.2019 18:15:26
  • Zuletzt bearbeitet 21.11.2024 04:41:44

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: EJB Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attack...

6.1

CVE-2019-2889

  • EPSS 1.15%
  • Veröffentlicht 16.10.2019 18:15:26
  • Zuletzt bearbeitet 21.11.2024 04:41:44

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via H...

7.2

CVE-2019-2890

  • EPSS 37.6%
  • Veröffentlicht 16.10.2019 18:15:26
  • Zuletzt bearbeitet 21.11.2024 04:41:45

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacke...

8.1

CVE-2019-2891

  • EPSS 1.58%
  • Veröffentlicht 16.10.2019 18:15:26
  • Zuletzt bearbeitet 21.11.2024 04:41:45

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker w...