CVE-2015-4852

Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0 va 12.2.1.0 dagi WLS xavfsizlik komponenti masofaviy tajovuzkorlarga T3 protokoli trafigidagi 7001 TCP portiga bog'liq bo'lgan tayyorlangan ketma-ket Java obyekti orqali o'zboshimchalik bilan buyruqlarni bajarishga imkon beradi. oracle_common/modules/com.bea.core.apache.commons.collections.jar. DIQQAT: ushbu CVE doirasi WebLogic Server mahsuloti bilan cheklangan.

CVSS Vector

Manbalar

• http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/
• http://packetstormsecurity.com/files/152268/Oracle-Weblogic-Server-Deserialization-Remote-Code-Execution.html
• http://www.openwall.com/lists/oss-security/2015/11/17/19
• http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
• http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html