CVE-2017-3506 Oracle WebLogic Server
Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document.
- CVSS
- not scored
On CISA’s exploited list
Oracle WebLogic Server OS Command Injection Vulnerability
- Added
- 2024-06-03
- Federal patch deadline
- 2024-06-24
- Ransomware use
- not known