Oracle WebLogic Server vulnerabilities

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Messaging Service.

Vulnerability in the Core component of Oracle WebLogic Server (Oracle Fusion Middleware). An unauthenticated attacker can exploit it over the network via TLS to perform unauthorized update, insert or delete access to some data, read a subset of data, and cause a partial denial of service. CVSS 7.3.

Vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker can remotely access data via T3, IIOP, potentially impacting additional products.

Vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker can remotely compromise the system via HTTP, affecting integrity and availability. Attacks can result in unauthorized creation, deletion, or modification of data and complete denial of service.

Vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker can remotely compromise the system via T3, IIOP under difficult conditions. Successful attacks can result in takeover of Oracle WebLogic Server.

Vulnerability in Oracle WebLogic Server (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows an unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks can result in takeover of the server.

Vulnerability in Oracle WebLogic Server (component: Console) in versions 14.1.2.0.0 and 15.1.1.0.0. A high privileged attacker with network access via HTTP can easily exploit this vulnerability, leading to takeover of the server.

Vulnerability in Oracle WebLogic Server (part of Oracle Fusion Middleware) versions 14.1.2.0.0 and 15.1.1.0.0. An authenticated attacker with high privileges can read a subset of data and modify critical data via HTTP, affecting other products.

Vulnerability in Oracle WebLogic Server (component: Console) versions 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with local access to the infrastructure can easily exploit this flaw, leading to unauthorized access to critical data or full access to all data. The attack may impact additional products (scope change).

A vulnerability in Oracle WebLogic Server (Core component) allows a low-privileged attacker with network access via HTTP to compromise the server.

Vulnerability in Oracle WebLogic Server (Core component) allows a low-privileged attacker with network access via RMI to take over the server. The attack is easily exploitable.

Vulnerability in Oracle WebLogic Server (Core component) allows an unauthenticated attacker via T3 or IIOP to take over the server. Exploitation is difficult.

Vulnerability in Oracle WebLogic Server (WLS - Web Services component) allows an unauthenticated attacker to remotely access critical data. The attack may impact other products.

Vulnerability in Oracle WebLogic Server (Core component) allows a low-privileged attacker to take over the server via HTTP. The attack does not affect other products.

Vulnerability in Oracle WebLogic Server (component: Core) allows a low-privileged attacker with network access via HTTP to compromise the system. No user interaction is required.

Vulnerability in Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise Oracle WebLogic Server, potentially leading to a takeover.

Vulnerability in Oracle WebLogic Server (Core component) allows a high-privileged attacker with physical access to the communication segment to take over the server. The attack may impact additional products (scope change).

A vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware, component: Console) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An easily exploitable flaw allows a high-privileged attacker with network access via HTTPS to take over Oracle WebLogic Server. CVSS 7.2.

Vulnerability in Oracle WebLogic Server (component: Web Services) affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via HTTP can exploit it, but human interaction from a person other than the attacker is required. Successful attacks can result in unauthorized creation, deletion, or modification of critical data.

A vulnerability in Oracle WebLogic Server (component: Core) in versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP. It allows unauthorized read access to a subset of data.

Vulnerability in Oracle WebLogic Server (component: Core). Affected versions are 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Oracle WebLogic Server. Successful attacks can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 7.5 (Availability impacts).