Description
Oracle Fusion Middleware（Oracle融合中间件）是美国甲骨文（Oracle）公司的一套面向企业和云环境的业务创新平台。该平台提供了中间件、软件集合等功能。 Oracle Fusion Middleware 的 Oracle WebLogic Server 12.2.1.4.0版本和14.1.1.0.0版本存在安全漏洞。攻击者利用该漏洞可以接管Oracle WebLogic Server。
Weblogic 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.csdn.net/YouthBelief/article/details/121119954
https://www.cnblogs.com/pursue-security/p/17029495.html
https://github.com/0day404/HV-2024-POC/blob/main/WebLogic%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2024-21006).md
https://www.secrss.com/articles/51214
https://zhuanlan.zhihu.com/p/32301092
https://nosec.org/m/share/5081.html
https://www.aliyun.com/sswb/1303398.html
https://nvd.nist.gov/vuln/detail/cve-2020-14882
https://www.oracle.com/security-alerts/alert-cve-2020-14750.html
https://www.infosecurity-magazine.com/news/critical-oracle-weblogic-rce/
https://www.sentinelone.com/vulnerability-database/cve-2020-2551/
https://www.exploit-db.com/exploits/49479
https://www.rapid7.com/blog/post/2020/10/29/oracle-weblogic-unauthenticated-complete-takeover-cve-2020-14882-what-you-need-to-know/
https://www.broadcom.com/support/security-center/protection-bulletin/cve-2024-20931-oracle-weblogic-server-rce-vulnerability
https://nsfocusglobal.com/oracle-weblogic-server-remote-code-execution-and-denial-of-service-vulnerability-cve-2025-21535-cve-2025-21549/