← Back

CVE-2017-10271

nvd nistnuclei
Published: Oct 19, 2017Modified: Apr 21, 2026CISA KEV

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Affected (4)

Oracle
1 product
Weblogic Server
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Weblogic Server
Version 10.3.6.0.0
Weblogic Server
Version 12.1.3.0.0
Weblogic Server
Version 12.2.1.1.0
Weblogic Server
Version 12.2.1.2.0

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (13)

Source: secalert_us@oracle.com
PatchVendor Advisory
Source: secalert_us@oracle.com
Broken LinkThird Party AdvisoryVDB Entry
Source: secalert_us@oracle.com
Broken LinkThird Party AdvisoryVDB Entry
Source: secalert_us@oracle.com
Exploit
Source: secalert_us@oracle.com
ExploitThird Party AdvisoryVDB Entry
Source: secalert_us@oracle.com
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.