CVE-2017-10271

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.

CISA Known Exploited Vulnerability

Vendor / Product Oracle — WebLogic Server
Date Added 2022-02-10
Remediation Due 2022-08-10
Ransomware Use CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2017-10271

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
oracle weblogic_server 10.3.6.0.0
oracle weblogic_server 12.1.3.0.0
oracle weblogic_server 12.2.1.1.0
oracle weblogic_server 12.2.1.2.0

References & Advisories (7)

https://www.exploit-db.com/exploits/43458/
Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/43924/
Exploit Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/101304
Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1039608
Broken Link Third Party Advisory VDB Entry

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →