ID de Prueba:	1.3.6.1.4.1.25623.1.0.806622
Categoría:	Web Servers
Título:	Oracle WebLogic Server Java Deserialization / RCE Vulnerability (CVE-2015-4852) - Version Check
Resumen:	Oracle WebLogic Server is prone to a remote code execution (RCE); vulnerability.
Descripción:	Summary: Oracle WebLogic Server is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: Unsafe deserialization allows unauthenticated remote attackers to run arbitrary code on the Oracle WebLogic Server. Vulnerability Impact: Successfully exploiting this issue allows attackers to execute arbitrary code in the context of the affected application. Affected Software/OS: Oracle WebLogic Server versions 10.3.6.0, 12.1.2.0, 12.1.3.0 and 12.2.1.0 are known to be affected. Solution: Updates are available. Please see the references or vendor advisory for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4852 BugTraq ID: 77539 http://www.securityfocus.com/bid/77539 https://www.exploit-db.com/exploits/42806/ https://www.exploit-db.com/exploits/46628/ http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/ http://packetstormsecurity.com/files/152268/Oracle-Weblogic-Server-Deserialization-Remote-Code-Execution.html https://github.com/foxglovesec/JavaUnserializeExploits/blob/master/weblogic.py http://www.openwall.com/lists/oss-security/2015/11/17/19 http://www.securitytracker.com/id/1038292
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.