Vulnerabilities CVE-2017-3506

CVE-2017-3506

Medium

Open

KEV

TLP:CLEAR

Oracle WebLogic Server OS Command Injection Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Oracle — WebLogic Server — Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document.

Details

EPSS Score ⓘ: 96.28%

99.9th percentile
Confidence: 100%
CISA KEV
Date Added: Jun 3, 2024
Patch Due: Jun 24, 2024
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.