Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules/com.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-05-03. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
5 versions affected across 3 products
🚨 CRITICAL: CVE-2015-4852 | CVSS 9.8 Oracle WebLogic Server RCE via deserialization flaw in T3 protocol (port 7001). Affects versions 10[.]3[.]6[.]0-12[.]2[.]1[.]0. Patch immediately. #CVE #PatchNow #ThreatIntel https://t.co/Kjl3flK5yB
Post summary
Oracle WebLogic Server RCE vulnerability CVE-2015-4852 with CVSS 9.8 is announced, and users are advised to patch immediately. No PoC, exploit, or active exploitation details are provided.
6 of 6 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oracle | storagetek_tape_analytics_sw_tool | 2.3 | - | - |
| App | oracle | virtual_desktop_infrastructure | - | - | - |
| App | oracle | weblogic_server | 10.3.6.0.0 | - | - |
| App | oracle | weblogic_server | 12.1.2.0.0 | - | - |
| App | oracle | weblogic_server | 12.1.3.0.0 | - | - |
| App | oracle | weblogic_server | 12.2.1.0.0 | - | - |