Oracle WebLogic Server vulnerabilities

Vulnerability in Oracle WebLogic Server (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks can result in takeover of the server.

Vulnerability in Oracle WebLogic Server (component: Console) in versions 14.1.2.0.0 and 15.1.1.0.0. A high privileged attacker with network access via HTTP can easily exploit this vulnerability, leading to takeover of the server.

Vulnerability in Oracle WebLogic Server (part of Oracle Fusion Middleware) versions 14.1.2.0.0 and 15.1.1.0.0. An authenticated attacker with high privileges can read a subset of data and modify critical data via HTTP, affecting other products.

Vulnerability in Oracle WebLogic Server (component: Console) versions 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with local access to the infrastructure can easily exploit this flaw, leading to unauthorized access to critical data or full access to all data. The attack may impact additional products (scope change).

A vulnerability in Oracle WebLogic Server (Core component) allows a low-privileged attacker with network access via HTTP to compromise the server.

Vulnerability in Oracle WebLogic Server (Core component) allows a low-privileged attacker with network access via RMI to take over the server. The attack is easily exploitable.

Vulnerability in Oracle WebLogic Server (Core component) allows an unauthenticated attacker via T3 or IIOP to take over the server. Exploitation is difficult.

Vulnerability in Oracle WebLogic Server (WLS - Web Services component) allows an unauthenticated attacker to remotely access critical data. The attack may impact other products.

Vulnerability in Oracle WebLogic Server (Core component) allows a low-privileged attacker to take over the server via HTTP. The attack does not affect other products.

Vulnerability in Oracle WebLogic Server (component: Core) allows a low-privileged attacker with network access via HTTP to compromise the system. No user interaction is required.

Vulnerability in Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise Oracle WebLogic Server, potentially leading to a takeover.

Vulnerability in Oracle WebLogic Server (Core component) allows a high-privileged attacker with physical access to the communication segment to take over the server. The attack may impact additional products (scope change).

A vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware, component: Console) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An easily exploitable flaw allows a high-privileged attacker with network access via HTTPS to take over Oracle WebLogic Server. CVSS 7.2.