Skip to main content
← All vulnerabilities
CVE-2014-4210

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers

Published
Last modified
published
Not listed in CISA KEV
5 proofs of concept on GitHub, 1 Nuclei template

Summary

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services.

Timeline

  1. CVE published
  2. Record last updated
  3. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • n/a n/a

    Version range not reported

References 12

vmware.com

securityfocus.com

exchange.xforce.ibmcloud.com

oracle.com

seclists.org

GitHub · projectdiscovery/nuclei-templates

GitHub · NHPT/WebLogic-SSRF_CVE-2014-4210

GitHub · NoneNotNull/SSRFX

GitHub · ZorvithonLeo/Exploit-CVE-2014-4210-

GitHub · daybreak-kits/weblogicScanner

GitHub · unmanarc/CVE-2014-4210-SSRF-PORTSCANNER-POC