Vulnerabilities > Oracle > Weblogic Server > 12.2.1.0.0

DATE CVE VULNERABILITY TITLE RISK
2016-07-21 CVE-2016-3510 Remote Code Execution vulnerability in Oracle Weblogic Server 10.3.6.0.0/12.1.3.0.0/12.2.1.0.0
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586.
network
low complexity
oracle
critical
10.0
2016-07-21 CVE-2016-3499 Arbitrary File Upload vulnerability in Oracle WebLogic Server 12.1.3.0.0/12.2.1.0.0
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container.
network
low complexity
oracle
critical
10.0
2016-04-21 CVE-2016-3416 Remote Security vulnerability in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality and integrity via vectors related to Console.
network
oracle
4.3
2016-04-21 CVE-2016-0638 Remote Security vulnerability in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Messaging Service.
network
low complexity
oracle
7.5
2016-01-21 CVE-2016-0577 Remote Security vulnerability in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0574.
network
low complexity
oracle
7.5
2016-01-21 CVE-2016-0574 Remote Security vulnerability in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0577.
network
low complexity
oracle
7.5
2016-01-21 CVE-2016-0573 Remote Security vulnerability in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Java Messaging Service.
network
low complexity
oracle
7.5
2016-01-21 CVE-2016-0572 Remote Security vulnerability in Oracle Fusion Middleware
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Coherence Container.
network
low complexity
oracle
7.5
2015-11-18 CVE-2015-4852 Deserialization of Untrusted Data vulnerability in Oracle products
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar.
network
low complexity
oracle CWE-502
critical
9.8