VDB
BDU%3A2015-12099
BDU%3A2015-12099
PUBLISHED
CVSS 7.5 HIGH
Уязвимость сервера приложений Oracle WebLogic Server, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp. | WebLogic Server, Retail Xstore Point of Service, Communications WebRTC Session Controller, Oracle Retail Clearance Optimization Engine, Communications Performance Intelligence Center (PIC) Software, Communications Application Session Controller, StorageTek Tape Analytics SW Tool |
Timeline
- Dec 14, 2015 CVE Published
- Sep 24, 2024 CVE Updated
References
- https://github.com/foxglovesec/JavaUnserializeExploits/blob/master/weblogic.py url
- https://blogs.oracle.com/security/entry/security_alert_cve_2015_4852 url
- http://www.oracle.com/technetwork/topics/security/alert-cve-2015-4852-2763333.html url
- http://www.openwall.com/lists/oss-security/2015/11/17/19 url
- http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/ url
- https://www.ibm.com/blogs/psirt/security-bulletin-multiple-vulnerabilities-in-ibm-websphere-extreme-scale-liberty-deployment/ url
- https://www.oracle.com/security-alerts/cpuapr2017.html url
- https://www.oracle.com/security-alerts/cpujan2018.html url
- https://www.oracle.com/security-alerts/cpuoct2016.html url
- https://www.oracle.com/security-alerts/cpuoct2017.html url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url