References https://github.com/phith0n/vulhub/blob/master/weblogic/ssrf/README.md https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33754 https://hackerone.com/reports/300513 https://www.levelblue.com/blogs/spiderlabs-blog/weblogic-ssrf-and-xss-cve-2014-4241-cve-2014-4210-cve-2014-4242/ https://www.acunetix.com/vulnerabilities/web/weblogic-server-side-request-forgery/ https://beaglesecurity.com/blog/vulnerability/weblogic-ssrf-in-searchpublicregistries-jsp.html https://github.com/NHPT/WebLogic-SSRF_CVE-2014-4210 https://www.tenable.com/plugins/was/112422 https://s4e.io/tools/weblogic-ssrf-in-searchpublicregistries-jsp-cve-2014-4210 https://fortiguard.fortinet.com/encyclopedia/ips/49883
Related VulnerabilitiesPoCibm-websphere-ssrf: IBM WebSphere HCL Digital Experience - Server-Side Request ForgeryWebLogic Server Proxy Plug-in 存在远程命令执行漏洞(CVE-2026-21962)PoCconfluence-xslt-macro-ssrf: Atlassian Confluence XSLT Macro - Server-Side Request ForgeryPoCwp-jetpack-ssrf: Wordpress Jetpack plugin - Server Side Request ForgeryPoCCVE-2021-2135: Oracle WebLogic Server - Remote Code ExecutionPoCbentoml-ssrf: Bentoml - Server Side Request ForgeryPoCgradio-image-ssrf: Gradio Image Component - Server-Side Request ForgeryWeblogic uddiexplorer 服务端请求伪造漏洞(CVE-2014-4210)PoCCVE-2014-4210: Oracle Weblogic - Server-Side Request ForgeryPoCCVE-2017-10271: Oracle WebLogic Server - Remote Command ExecutionPoCCVE-2017-3506: Oracle Fusion Middleware Weblogic Server - Remote OS Command ExecutionPoCCVE-2018-2894: Oracle WebLogic Server - Remote Code Execution