ZeroDay Findings
Sign inSign up

Findings

CVE-2017-10271

Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

Published Oct 19, 2017 · updated Aug 12, 2026 · oracle weblogic server

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Timeline

Detection, updates, and resolution for this record.

  1. Oct 19, 2017 · Catalog

    Detected

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of

  2. Feb 10, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Aug 10, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Aug 12, 2026 · Catalog

    Updated

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of

Required action

Apply updates per vendor instructions.

CISA due date Aug 10, 2022

Affected

  • cpe oracle/weblogic server10.3.6.0.0
  • cpe oracle/weblogic server12.1.3.0.0
  • cpe oracle/weblogic server12.2.1.1.0
  • cpe oracle/weblogic server12.2.1.2.0
  • vendor Oracle WebLogic Serverversion unspecified

Sources

  • CISA KEVCVE-2017-10271

    Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.

    cisa.gov
  • CVE.orgCVE-2017-10271

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2017-10271

    30-day exploitation probability 100.0%

    first.org
  • Exploit Database43458

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit Database43924

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_multi/http/oracle_weblogic_wsat_deserialization_rce

    Public module reference (excellent). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2017-10271

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with networ

    nvd.nist.gov

References