Test Kennung:	1.3.6.1.4.1.25623.1.0.105829
Kategorie:	Web Servers
Titel:	Oracle WebLogic Server Java Deserialization / RCE Vulnerability (CVE-2015-4852) - Active Check
Zusammenfassung:	Oracle WebLogic Server is prone to a remote code execution (RCE); vulnerability.
Beschreibung:	Summary: Oracle WebLogic Server is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: Unsafe deserialization allows unauthenticated remote attackers to run arbitrary code on the Oracle WebLogic Server. Vulnerability Impact: Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Affected Software/OS: Oracle WebLogic Server versions 10.3.6.0, 12.1.2.0, 12.1.3.0 and 12.2.1.0 are known to be affected. Solution: Updates are available. Please see the references or vendor advisory for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4852 BugTraq ID: 77539 http://www.securityfocus.com/bid/77539 https://www.exploit-db.com/exploits/42806/ https://www.exploit-db.com/exploits/46628/ http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/ http://packetstormsecurity.com/files/152268/Oracle-Weblogic-Server-Deserialization-Remote-Code-Execution.html https://github.com/foxglovesec/JavaUnserializeExploits/blob/master/weblogic.py http://www.openwall.com/lists/oss-security/2015/11/17/19 http://www.securitytracker.com/id/1038292
Copyright	Copyright (C) 2016 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.