CVE-2017-3248
Summary
| CVE | CVE-2017-3248 |
|---|---|
| State | PUBLISHED |
| Assigner | oracle |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-01-27 22:59:02 UTC |
| Updated | 2025-08-13 15:15:29 UTC |
| Description | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0 and 12.2.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS v3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). |
Risk And Classification
Primary CVSS: v3.0 9.8 CRITICAL from [email protected]
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Problem Types: NVD-CWE-noinfo | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 9.8 | CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | [email protected] | Primary | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:L/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Weblogic Server | 10.3.6.0.0 | All | All | All |
| Application | Oracle | Weblogic Server | 12.1.3.0.0 | All | All | All |
| Application | Oracle | Weblogic Server | 12.2.1.0.0 | All | All | All |
| Application | Oracle | Weblogic Server | 12.2.1.1.0 | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Oracle | WebLogic Server | affected 10.3.6.0 | Not specified |
| CNA | Oracle | WebLogic Server | affected 12.1.3.0 | Not specified |
| CNA | Oracle | WebLogic Server | affected 12.2.1.0 | Not specified |
| CNA | Oracle | WebLogic Server | affected 12.2.1.1 | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Oracle WebLogic Server CVE-2017-3248 Remote Security Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| www.vicarius.io/vsociety/posts/cve-2017-3248-mitigate-centos-weblogic-rce | af854a3a-2127-422b-91ae-364da2661108 | www.vicarius.io | |
| Oracle Weblogic Server Deserialization RMI UnicastRef Remote Code Execution ≈ Packet Storm | af854a3a-2127-422b-91ae-364da2661108 | packetstormsecurity.com | |
| www.vicarius.io/vsociety/posts/cve-2017-3248-detect-centos-weblogic-rce | af854a3a-2127-422b-91ae-364da2661108 | www.vicarius.io | |
| Oracle WebLogic 12.1.2.0 - RMI Registry UnicastRef Object Java Deserialization Remote Code Execution - Multiple webapps Exploit | af854a3a-2127-422b-91ae-364da2661108 | www.exploit-db.com | |
| Oracle Critical Patch Update - January 2017 | af854a3a-2127-422b-91ae-364da2661108 | www.oracle.com | Patch, Vendor Advisory |
| Oracle WebLogic Unspecified Flaw in Core Components Lets Remote Users Gain Elevated Privileges - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| [R1] Oracle WebLogic RMI Registry UnicastRef Object Java Deserialization Remote Code Execution - Research Advisory | Tenable™ | af854a3a-2127-422b-91ae-364da2661108 | www.tenable.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.