CVE-2016-3510
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
40Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 91%
da publicação à armano mesmo dia
Publicada no NVD21 de jul.
metasploit19 de jul.
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586.
Produtos afetados
n/a · n/aReferências
http://packetstormsecurity.com/files/152324/Oracle-Weblogic-Server-Deserialization-MarshalledObject-Remote-Code-Execution.htmlhttps://www.tenable.com/security/research/tra-2016-21http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlhttp://www.securityfocus.com/bid/91787http://www.securitytracker.com/id/1036373