CVE-2018-3249

CVE-2018-3249: vulnerability in Oracle Corporation WebLogic Server

Published 17 Oct 2018 · Updated 02 Oct 2024

Follow this CVE + Monitor WebLogic Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.1%

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Affected products

Oracle Corporation · WebLogic Server

Related CVEs — Oracle Corporation WebLogic Server

In the same product, most dangerous first.

CVE-2020-14882CRITICALCVE-2020-14882EPSS 100.0%KEV CVE-2017-10271HIGHCVE-2017-10271EPSS 100.0%KEV CVE-2018-2628CRITICALCVE-2018-2628EPSS 100.0%KEV CVE-2023-21839HIGHCVE-2023-21839EPSS 99.9%KEV CVE-2020-14750CRITICALCVE-2020-14750EPSS 99.2%KEV CVE-2020-14883HIGHCVE-2020-14883EPSS 97.7%KEV

References

http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html http://www.securityfocus.com/bid/105643 http://www.securitytracker.com/id/1041896