Oracle WebLogic Server vulnerabilities

A vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via T3 to compromise the server. Attacks may lead to hanging or frequent crashes of the server, resulting in a complete denial of service (DoS).

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to JavaServer Faces.

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability.

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability.

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Java Messaging Service.

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Coherence Container.

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Security.

Vulnerability in Oracle WebLogic Server (component: WLS Core Components) affects versions 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable flaw allows unauthenticated attacker with network access via RMI to compromise Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts).

Vulnerability in Oracle WebLogic Server (component: Core) allows a low-privileged attacker via T3 or IIOP to completely take over the server. The attack may impact other products (scope change). CVSS score 9.9.

Vulnerability in Oracle WebLogic Server (component: Core) allows an unauthenticated attacker via IIOP to completely take over the server. CVSS score 9.8.

Vulnerability in Oracle WebLogic Server (component: Core) allows an unauthenticated attacker via T3 or IIOP to completely take over the server. CVSS score 9.8.

Vulnerability in Oracle WebLogic Server (component: Core) allows an unauthenticated attacker via T3 or IIOP to completely take over the server. CVSS score 9.8.

Vulnerability in Oracle WebLogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Unauthenticated attacker via network (HTTP) can modify data.

In Oracle WebLogic Server (component: Core), a vulnerability can be exploited by an unauthenticated attacker over the network via SOAP. Successful attack can lead to complete server takeover.

In Oracle WebLogic Server (component: Core), a vulnerability can be exploited by an unauthenticated attacker over the network via HTTP. Successful attack can lead to complete server takeover.

Critical vulnerability in Oracle WebLogic Server (Core component) allows an unauthenticated attacker to remotely take over the server via network using HTTP. The attack does not impact other products (no scope change).

Oracle WebLogic Server (Core component) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 contain an easily exploitable vulnerability allowing an unauthenticated attacker unauthorized access to critical data and the ability to modify or delete it.

Vulnerability in Oracle WebLogic Server (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. A low-privileged attacker can remotely compromise the server via SAML, with potential impact on additional products (scope change).

In Oracle WebLogic Server (component: Core), a vulnerability can be exploited by an unauthenticated attacker over the network via TCP. Successful attack can lead to complete server takeover.

Critical vulnerability in Oracle WebLogic Server (Core component) allows an unauthenticated attacker to remotely take over the server via network using T3 and IIOP protocols. The attack does not impact other products (no scope change).

Critical vulnerability in Oracle WebLogic Server (Core component) allows an unauthenticated attacker to remotely take over the server via network using T3 and IIOP protocols. The attack does not impact other products (no scope change).

Critical vulnerability in Oracle WebLogic Server (Core component) allows an unauthenticated attacker to remotely take over the server via network using SOAP. The attack does not impact other products (no scope change).

Vulnerability in Oracle WebLogic Server allows an unauthenticated attacker via HTTP to take over the server. Exploitation is easy and requires no privileges.

In Oracle WebLogic Server (component: Core), a vulnerability can be exploited by an unauthenticated attacker over the network via T3 and IIOP protocols. Successful attack can lead to complete server takeover.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server. The attacker can cause hangs or frequent crashes of the server and gain unauthorized access to data.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server. Affected versions are 10.3.6.0 and 12.1.3.0.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access to compromise the server. Affected versions are 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1.

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to affect confidentiality, integrity, and availability.

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS-WebServices.

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability.

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability.

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container.

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Messaging Service.

Vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker can remotely access data via T3, IIOP, potentially impacting additional products.

Vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker can remotely compromise the system via HTTP, affecting integrity and availability. Attacks can result in unauthorized creation, deletion, or modification of data and complete denial of service.

Vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker can remotely compromise the system via T3, IIOP under difficult conditions. Successful attacks can result in takeover of Oracle WebLogic Server.

Vulnerability in Oracle WebLogic Server (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks can result in takeover of the server.

Vulnerability in Oracle WebLogic Server (component: Console) in versions 14.1.2.0.0 and 15.1.1.0.0. A high privileged attacker with network access via HTTP can easily exploit this vulnerability, leading to takeover of the server.

Vulnerability in Oracle WebLogic Server (part of Oracle Fusion Middleware) versions 14.1.2.0.0 and 15.1.1.0.0. An authenticated attacker with high privileges can read a subset of data and modify critical data via HTTP, affecting other products.

Vulnerability in Oracle WebLogic Server (component: Console) versions 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with local access to the infrastructure can easily exploit this flaw, leading to unauthorized access to critical data or full access to all data. The attack may impact additional products (scope change).

A vulnerability in Oracle WebLogic Server (Core component) allows a low-privileged attacker with network access via HTTP to compromise the server.

Vulnerability in Oracle WebLogic Server (Core component) allows a low-privileged attacker with network access via RMI to take over the server. The attack is easily exploitable.

Vulnerability in Oracle WebLogic Server (Core component) allows an unauthenticated attacker via T3 or IIOP to take over the server. Exploitation is difficult.

Vulnerability in Oracle WebLogic Server (WLS - Web Services component) allows an unauthenticated attacker to remotely access critical data. The attack may impact other products.

Vulnerability in Oracle WebLogic Server (Core component) allows a low-privileged attacker to take over the server via HTTP. The attack does not affect other products.

Vulnerability in Oracle WebLogic Server (component: Core) allows a low-privileged attacker with network access via HTTP to compromise the system. No user interaction is required.

Vulnerability in Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise Oracle WebLogic Server, potentially leading to a takeover.

Vulnerability in Oracle WebLogic Server (Core component) allows a high-privileged attacker with physical access to the communication segment to take over the server. The attack may impact additional products (scope change).

A vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware, component: Console) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An easily exploitable flaw allows a high-privileged attacker with network access via HTTPS to take over Oracle WebLogic Server. CVSS 7.2.