漏洞描述 易受攻击的WebLogic服务允许未经身份验证的攻击者通过T3网络访问及破坏Oracle WebLogicServer。此漏洞的成功攻击可能导致攻击者接管Oracle WebLogic Server,造成远程代码执行。
相关漏洞推荐 CVE-2017-10271: WebLogic XMLDecoder 反序列化漏洞 CVE-2017-10271 POC 2025-09-01 | WebLogic XMLDecoder Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent - WL... CVE-2020-14750: Oracle WebLogic Server - Remote Command Execution POC 2025-09-01 | Oracle WebLogic Server Oracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0 is susceptible ... CVE-2020-14883: Oracle Fusion Middleware WebLogic Server Administration Console - Remote Code Execution POC 2025-09-01 | Oracle Fusion Middleware WebLogic Server Administration Console The Oracle Fusion Middleware WebLogic Server admin console in versions 10.3.6.0.0, 12.1.3.0.0, 12.2.... CVE-2018-1000600: Pre-auth Fully-responded SSRF POC 2025-09-01 | Pre-auth A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier... CVE-2018-1000861: Jenkins 2.138 Remote Command Execution POC 2025-09-01 | Jenkins A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier...