WaratekVRT Sign in

Medium Oracle Fusion Middleware Oracle WebLogic Server CVEs

7 CVEs, 1 exploited, 1 protected by Waratek

Reset
More filters (1)
Columns
Oracle product: Oracle Fusion Middleware / Oracle WebLogic Server✕
Overview 7 matches · 1 protected · 1 exploited · 0 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5
7matches 1protected14.3% 1exploited14.3% 0CISA KEV0.0% 2public PoC28.6% 0EPSS ≥ 0.50.0%
Protected by Waratek 1 14.3% Rule in development 0 0.0% Mitigation candidate 1 14.3% No exploit published 5 71.4%
Critical 0 0.0% High 0 0.0% Medium 7 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 14.3% partly blocked 0 0.0% not blocked 6 85.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 14.3% Working exploit published 1 14.3% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 5 71.4%
split by peak 2 / quarter
No exploit published: 5Mitigation candidate: 1Protected by Waratek: 1 Medium: 7 not blocked: 6blocked by ARMR today: 1 No public exploit: 5Working exploit published: 1Exploited: 1
Q1 112 Mitigation candidate1 No exploit published1 Medium2 not blocked2 Working exploit published1 No public exploit1 Q2 110 Q3 110 Q4 112 No exploit published2 Medium2 not blocked2 No public exploit2 Q1 120 Q2 120 Q3 120 Q4 120 Q1 130 Q2 130 Q3 130 Q4 131 Protected by Waratek1 Medium1 blocked by ARMR today1 Exploited1 Q1 140 Q2 140 Q3 140 Q4 140 Q1 151 No exploit published1 Medium1 not blocked1 No public exploit1 Q2 150 Q3 151 No exploit published1 Medium1 not blocked1 No public exploit1
Q1 11Q3 11Q1 12Q3 12Q1 13Q3 13Q1 14Q3 14Q1 15Q3 15
7 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2015-2623 Medium 2015-07-16 No exploit published No public exploit Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 3.0.1 and 3.1.2, and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, 12.1.2.0, and 12.1.3.0, allows remote attackers to affect integrity via unknown vectors related to Java Server Faces.
CVE-2014-6569 Medium 2015-01-21 No exploit published No public exploit Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect confidentiality via vectors related to CIE Related Components.
CVE-2013-3827 Medium 2013-10-16 Protected by Waratek Exploited Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fusion Middleware 2.1.1, 3.0.1, and 3.1.2; the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.3.0, 11.1.2.4.0, and 12.1.2.0.0; and the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors related to Java Server Faces or Web Container.
CVE-2011-2320 Medium 2011-10-18 No exploit published No public exploit Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality via unknown vectors related to Web Services.
CVE-2011-2319 Medium 2011-10-18 No exploit published No public exploit Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.2.4.0, 10.0.2.0, 10.3.3.0, 10.3.4.0, and 10.3.5.0 allows remote attackers to affect confidentiality, related to JMS.
CVE-2010-4453 Medium 2011-01-19 No exploit published No public exploit Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 7.0.7, 8.1.6, 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect integrity via unknown vectors related to Servlet Container.
CVE-2010-4437 Medium 2011-01-19 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Servlet Container.