Description
Oracle Fusion Middleware 的 Oracle WebLogic Server 12.2.1.4.0 版本和 14.1.1.0.0 版本存在安全漏洞，该漏洞源于允许未经身份验证的攻击者通过 T3、IIOP 进行网络访问来破坏 Oracle WebLogic Server。
Oracle WebLogic 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/liliyuanshangcao/p/13549992.html
https://www.secrss.com/articles/51214
https://nti.nsfocus.com/api/v2/report/pdf/?file=Oracle_WebLogic_Server_Remote_Code_Execution_And_Denial_Of_Service_Vulnerability_Announcement_20250122.pdf
https://github.com/0day404/HV-2024-POC/blob/main/WebLogic%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2024-21006).md
https://blog.csdn.net/yunshang_secure/article/details/135169887
https://www.gdust.edu.cn/jszx/wlaq1/xxtb/index.aspx?id=172
https://nosec.org/m/share/5081.html
https://zhuanlan.zhihu.com/p/32301092
https://www.aliyun.com/sswb/1342395.html
http://www.bmth666.cn/2023/01/30/Weblogic%E6%9C%AA%E6%8E%88%E6%9D%83%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/index.html
https://cloud.tencent.com/developer/article/2436663
https://wxb.fzu.edu.cn/info/1015/1834.htm
https://www.sxxdckj.com/cms/a/Oracle-WebLogic-Server-yuan-cheng-dai-ma-zhi-xing-lou-dong.html
https://www.btmc.edu.cn/wlxxzx/info/1058/1654.htm
https://www.weesn.com/it/html/cn/aqgg/440.html
https://it.shanghaitech.edu.cn/2021/0316/c8406a61004/page.htm
https://www.secevery.com/toBugInfo?id=1813765100419588097
https://www.anquanke.com/post/id/152164
https://www.oracle.com/security-alerts/alert-cve-2020-14750.html
https://nsfocusglobal.com/oracle-weblogic-server-remote-code-execution-and-denial-of-service-vulnerability-cve-2025-21535-cve-2025-21549/
https://nvd.nist.gov/vuln/detail/cve-2020-14882
https://www.broadcom.com/support/security-center/protection-bulletin/cve-2024-20931-oracle-weblogic-server-rce-vulnerability