Test Kennung:	1.3.6.1.4.1.25623.1.0.811244
Kategorie:	Web Servers
Titel:	Oracle WebLogic Server Multiple Vulnerabilities (cpujul2017-3236622)
Zusammenfassung:	Oracle WebLogic Server is prone to multiple vulnerabilities.
Beschreibung:	Summary: Oracle WebLogic Server is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to some unspecified errors in the 'Sample apps (Struts 2)', 'Core Components', 'Web Container', 'WLST' 'Web Services', 'WLS-WebServices' and 'WLS Security' components of application. Vulnerability Impact: Successful exploitation will allow attackers to have an impact on confidentiality, integrity and availability. Affected Software/OS: Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Solution: See the referenced advisories for a solution. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-10137 BugTraq ID: 99634 http://www.securityfocus.com/bid/99634 http://www.securitytracker.com/id/1038939 Common Vulnerability Exposure (CVE) ID: CVE-2017-5638 BugTraq ID: 96729 http://www.securityfocus.com/bid/96729 CERT/CC vulnerability note: VU#834067 https://www.kb.cert.org/vuls/id/834067 https://exploit-db.com/exploits/41570 https://www.exploit-db.com/exploits/41614/ http://blog.talosintelligence.com/2017/03/apache-0-day-exploited.html http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2017-5638-apache-struts-vulnerability-remote-code-execution/ http://www.eweek.com/security/apache-struts-vulnerability-under-attack.html https://arstechnica.com/security/2017/03/critical-vulnerability-under-massive-attack-imperils-high-impact-sites/ https://github.com/mazen160/struts-pwn https://github.com/rapid7/metasploit-framework/issues/8064 https://isc.sans.edu/diary/22169 https://nmap.org/nsedoc/scripts/http-vuln-cve2017-5638.html https://packetstormsecurity.com/files/141494/S2-45-poc.py.txt https://twitter.com/theog150/status/841146956135124993 https://www.imperva.com/blog/2017/03/cve-2017-5638-new-remote-code-execution-rce-vulnerability-in-apache-struts-2/ https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922@%3Cannounce.apache.org%3E https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7@%3Cannounce.apache.org%3E http://www.securitytracker.com/id/1037973 Common Vulnerability Exposure (CVE) ID: CVE-2017-10147 BugTraq ID: 99651 http://www.securityfocus.com/bid/99651 https://erpscan.io/advisories/erpscan-17-041-unauthorized-container-shutdown-servermigrationcoordinator/ https://github.com/vah13/OracleCVE/tree/master/CVE-2017-10147 Common Vulnerability Exposure (CVE) ID: CVE-2017-10178 BugTraq ID: 99644 http://www.securityfocus.com/bid/99644 Common Vulnerability Exposure (CVE) ID: CVE-2013-2027 MDVSA-2015:158 http://www.mandriva.com/security/advisories?name=MDVSA-2015:158 http://advisories.mageia.org/MGASA-2015-0096.html http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html https://bugzilla.redhat.com/show_bug.cgi?id=947949 openSUSE-SU-2015:0269 http://lists.opensuse.org/opensuse-updates/2015-02/msg00055.html Common Vulnerability Exposure (CVE) ID: CVE-2017-10148 BugTraq ID: 99652 http://www.securityfocus.com/bid/99652 https://erpscan.io/advisories/erpscan-17-042-anonymous-log-injection-in-fscm/ https://github.com/vah13/OracleCVE/tree/master/CVE-2017-10148 Common Vulnerability Exposure (CVE) ID: CVE-2017-10063 BugTraq ID: 99653 http://www.securityfocus.com/bid/99653 Common Vulnerability Exposure (CVE) ID: CVE-2017-10123 BugTraq ID: 99650 http://www.securityfocus.com/bid/99650 Common Vulnerability Exposure (CVE) ID: CVE-2017-10352 BugTraq ID: 102442 http://www.securityfocus.com/bid/102442 http://www.securitytracker.com/id/1039608 Common Vulnerability Exposure (CVE) ID: CVE-2017-10271 BugTraq ID: 101304 http://www.securityfocus.com/bid/101304 https://www.exploit-db.com/exploits/43458/ https://www.exploit-db.com/exploits/43924/ https://github.com/c0mmand3rOpSec/CVE-2017-10271 Common Vulnerability Exposure (CVE) ID: CVE-2017-10152 BugTraq ID: 101351 http://www.securityfocus.com/bid/101351 Common Vulnerability Exposure (CVE) ID: CVE-2017-10336 BugTraq ID: 101392 http://www.securityfocus.com/bid/101392 Common Vulnerability Exposure (CVE) ID: CVE-2017-10334
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.