ByteOS Network

NVD Vulnerability Details :

CVE-2017-10271

Deferred

Known KEV

More Info Official Page

Source-secalert_us@oracle.com

View Known Exploited Vulnerability (KEV) details

Published At-19 Oct, 2017 | 17:29

Updated At-20 Apr, 2025 | 01:37

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2022-02-10	2022-08-10	Oracle Corporation WebLogic Server Remote Code Execution Vulnerability	Apply updates per vendor instructions.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Secondary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

Oracle Corporation

>>weblogic_server>>10.3.6.0.0

cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>weblogic_server>>12.1.3.0.0

cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*

Oracle Corporation

>>weblogic_server>>12.2.1.1.0

cpe:2.3:a:oracle:weblogic_server:12.2.1.1.0:*:*:*:*:*:*:*

Oracle Corporation

>>weblogic_server>>12.2.1.2.0

cpe:2.3:a:oracle:weblogic_server:12.2.1.2.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov
CWE-306	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	secalert_us@oracle.com	Patch Vendor Advisory
http://www.securityfocus.com/bid/101304	secalert_us@oracle.com	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039608	secalert_us@oracle.com	Broken Link Third Party Advisory VDB Entry
https://github.com/c0mmand3rOpSec/CVE-2017-10271	secalert_us@oracle.com	Exploit
https://www.exploit-db.com/exploits/43458/	secalert_us@oracle.com	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/43924/	secalert_us@oracle.com	Exploit Third Party Advisory VDB Entry
http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.securityfocus.com/bid/101304	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039608	af854a3a-2127-422b-91ae-364da2661108	Broken Link Third Party Advisory VDB Entry
https://github.com/c0mmand3rOpSec/CVE-2017-10271	af854a3a-2127-422b-91ae-364da2661108	Exploit
https://www.exploit-db.com/exploits/43458/	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/43924/	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory VDB Entry

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History