CVE-2017-10147

Weblogic Server vulnerability

CVSS

8.6

EPSS

4.2%

EPSS pct

90th

Exploited

No known

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle WebLogic Server. CVSS 3.0 Base Score 8.6 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H). NOTE: the previous information is from the July 2017 CPU. Oracle has not commented on third-party claims that this issue exists in the migrate functionality in the WebLogic/cluster/singleton/ServerMigrationCoordinator class and allows remote attackers to shutdown the server via a crafted T3 request.

Affected vendor

Oracle

Affected product

Weblogic Server

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Published

2017-08-08

Risk analysis

Based on its CVSS vector, this vulnerability is exploitable over the network, low attack complexity, requiring no privileges, no user interaction. Successful exploitation leads to high impact to availability.

Its EPSS score of 4.2% reflects a lower probability of exploitation activity in the wild over the next 30 days, placing it above 90% of all scored CVEs.

Check your external exposure to CVE-2017-10147

Confirm whether Oracle Weblogic Server is running on any internet-facing host or subdomain.
Match discovered service fingerprints against the version affected by CVE-2017-10147.
Prioritise remediation if the asset is public, business-critical, or near authentication/payment flows.

How ThreatPort helps with CVE-2017-10147

ThreatPort's external attack surface scanner checks your internet-facing assets — agentlessly, from the outside in — for the exposed services and versions that CVE-2017-10147 affects, then prioritises the finding by real risk using CISA KEV and FIRST.org EPSS.

Run a free external exposure scan

Are you exposed to CVE-2017-10147?

Run an instant, non-intrusive external scan to check your attack surface for CVE-2017-10147.

Start free scan

No credit card. Agentless.

Related vulnerabilities

HIGH

CVE-2001-0875

Internet Explorer vulnerability

HIGH

CVE-1999-1514

Expressfs vulnerability

HIGH

CVE-2001-0928

Libgtop Daemon vulnerability