CVE-2017-3506

Oracle WebLogic Server OS Command Injection Vulnerability

Weblogic Server

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all…

24. Apr 2017

Ausgewertete Quellen

• Hersteller
  http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
• Hinweis
  http://www.securityfocus.com/bid/97884
• Hinweis
  http://www.securitytracker.com/id/1038296
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-3506
• CISA
  Oracle WebLogic Server OS Command Injection Vulnerability
• NVD
  CVE-2017-3506