Oracle

Weblogic Server

322 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2017-10152

  • EPSS 1.91%
  • Veröffentlicht 19.10.2017 17:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows low privileged attacker with ...

6.1

CVE-2017-10178

  • EPSS 1.47%
  • Veröffentlicht 08.08.2017 15:29:05
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticat...

4.3

CVE-2017-10123

  • EPSS 1.42%
  • Veröffentlicht 08.08.2017 15:29:04
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access v...

10

CVE-2017-10137

  • EPSS 3.79%
  • Veröffentlicht 08.08.2017 15:29:04
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: JNDI). Supported versions that are affected are 10.3.6.0 and 12.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce...

8.6

CVE-2017-10147

  • EPSS 4.21%
  • Veröffentlicht 08.08.2017 15:29:04
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthentic...

5.8

CVE-2017-10148

  • EPSS 2.59%
  • Veröffentlicht 08.08.2017 15:29:04
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthentic...

5.8

CVE-2017-10063

  • EPSS 1.64%
  • Veröffentlicht 08.08.2017 15:29:02
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthentica...

7.4

CVE-2017-3506

Warnung
  • EPSS 96.28%
  • Veröffentlicht 24.04.2017 19:59:03
  • Zuletzt bearbeitet 22.04.2026 13:39:47

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows un...

7.2

CVE-2017-3531

  • EPSS 1.93%
  • Veröffentlicht 24.04.2017 19:59:03
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Servlet Runtime). Supported versions that are affected are 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Easily "exploitable" vulnerability allows unauthent...

9.8

CVE-2017-5645

  • EPSS 89.04%
  • Veröffentlicht 17.04.2017 21:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.