Aller au contenu
en Se connecter
Non notée

CVE-2017-3531 Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Servlet Runtime)

Description

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Servlet Runtime). Supported versions that are affected are 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 7.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L).

Produits et versions touchés

Produit Versions touchées Corrigé en
WebLogic Server 12.2 12.2.1.0 → 12.2.1.2 Pas de correctif indiqué
WebLogic Server 12.1.3.0 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de WebLogic Server

Les 190 CVE de WebLogic Server →
CVE-2026-46848 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console) 7.9 Élevée CVE-2026-35311 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core) 8.8 Élevée CVE-2026-35302 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console) 8.3 Élevée CVE-2026-35303 Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console) 8.8 Élevée
Suivre cette CVE