Description
Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| weblogic_server | oracle / weblogic_server | 10.3.6.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 10.3.6.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 10.3.6.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 10.3.6.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 10.3.6.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.1.3.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.1.3.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.1.3.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.1.3.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.1.3.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.0.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.1.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.1.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.1.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.1.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.1.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.2.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.2.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.2.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.2.0 | affected |
| weblogic_server | oracle / weblogic_server | 12.2.1.2.0 | affected |
| WebLogic Server | Oracle Corporation / WebLogic Server | 10.3.6.0 | affected |
| WebLogic Server | Oracle Corporation / WebLogic Server | 12.1.3.0 | affected |
| WebLogic Server | Oracle Corporation / WebLogic Server | 12.2.1.0 | affected |
| WebLogic Server | Oracle Corporation / WebLogic Server | 12.2.1.1 | affected |
| WebLogic Server | Oracle Corporation / WebLogic Server | 12.2.1.2 | affected |