CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-04-24
Oracle WebLogic Server Web Services XMLDecoder Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2017-3506)
[Affected Scope] Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1, and 12.2.1.2
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands via malicious HTTP POST requests, leading to complete compromise of the WebLogic server
[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately, or restrict access to the vulnerable 'wls-wsat' web service context