Description
Oracle FusionMiddleware（Oracle融合中间件）是美国甲骨文（Oracle）公司的一套面向企业和云环境的业务创新平台。该平台提供了中间件、软件集合等功能。Oracle WebLogic Server是其中的一个适用于云环境和传统环境的应用服务器组件。在 CVE-2022- 21371 中，攻击者可利用该漏洞读取Weblogic Server 中的敏感信息，例如web.xml等。Oracle官方已发布安全更新以修复该漏洞。
WebLogic 文件读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://zhuanlan.zhihu.com/p/720433489
https://github.com/ADummmy/vulhub_Writeup/blob/main/Weblogic_%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E5%BC%B1%E5%8F%A3%E4%BB%A4%E6%BC%8F%E6%B4%9E.md
https://www.cnblogs.com/L-1906/p/17755720.html
https://blog.csdn.net/weixin_41182861/article/details/108582714
https://developer.volcengine.com/articles/7381518486213754930
https://fuping.site/2017/06/05/Weblogic-Vulnerability-Verification/
https://developer.aliyun.com/article/666670
https://cloud.tencent.com/developer/article/2168610
https://mozhe.cn/bug/detail/TkpnUmVjZ1UvRmVuYUoyMG5vRi9EQT09bW96aGUmozhe
https://blog.huzhan.com/80808/article/323
https://chenlvtang.top/2022/05/18/WebLogic%E5%8E%86%E5%8F%B2%E6%BC%8F%E6%B4%9E%E6%B5%85%E6%9E%90/
https://nosec.org/m/share/1705.html
https://www.kingkk.com/2018/09/weblogic%E6%BC%8F%E6%B4%9E%E7%BB%83%E4%B9%A0/
https://cert.360.cn/static/files/%E5%88%A9%E7%94%A8WebLogic%E6%BC%8F%E6%B4%9E%E6%8C%96%E7%9F%BF%E4%BA%8B%E4%BB%B6%E5%88%86%E6%9E%90.pdf
https://www.anquanke.com/post/id/175738%C2%A0%C2%A0%E5%9F%BA%E4%BA%8E%E6%94%BB%E5%87%BB%E6%B5%81%E9%87%8F%E5%92%8C%E6%97%A5%E6%9C%9F%E5%BD%95%E5%AF%B9Weblogic%E5%90%84%E7%B1%BB%E6%BC%8F%E6%B4%9E%E7%9A%84%E5%88%86%E6%9E%90%E6%80%9D%E8%B7%AF
https://zone.huoxian.cn/d/1163-weblogic
https://pentest-tools.com/blog/detect-cve-2022-21371-oracle-weblogic-servers
https://nvd.nist.gov/vuln/detail/cve-2022-21371
https://www.sentinelone.com/vulnerability-database/cve-2022-21371/
https://groups.google.com/g/obiba-users/c/Ilg9v5PaWfI
https://access.redhat.com/security/cve/cve-2025-50072
https://www.oracle.com/security-alerts/cpujul2025.html