VDB
BDU%3A2015-12099
BDU%3A2015-12099
PUBLISHED
CVSS 7.5 HIGH
Уязвимость сервера приложений Oracle WebLogic Server, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp. | WebLogic Server, Retail Xstore Point of Service, Communications WebRTC Session Controller, Oracle Retail Clearance Optimization Engine, Communications Performance Intelligence Center (PIC) Software, Communications Application Session Controller, StorageTek Tape Analytics SW Tool |
Timeline
- Dec 14, 2015 CVE Published
- Jul 20, 2026 CVE Updated
References
- https://github.com/foxglovesec/JavaUnserializeExploits/blob/master/weblogic.py url
- https://blogs.oracle.com/security/entry/security_alert_cve_2015_4852 url
- http://www.oracle.com/technetwork/topics/security/alert-cve-2015-4852-2763333.html advisory
- http://www.openwall.com/lists/oss-security/2015/11/17/19 url
- http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/ url
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-websphere-extreme-scale-liberty-deployment/ url
- https://www.oracle.com/security-alerts/cpuapr2017.html advisory
- https://www.oracle.com/security-alerts/cpujan2018.html advisory
- https://www.oracle.com/security-alerts/cpuoct2016.html advisory
- https://www.oracle.com/security-alerts/cpuoct2017.html advisory
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url
- https://www.exploit-db.com/exploits/46628/ url