[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2017-10271":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-14T16:36:57.460Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":47,"aliases":106,"duplicate_of":9,"upstream":107,"downstream":108,"duplicates":109,"related":110,"reserved_at":9,"published_at":111,"modified_at":112,"state":113,"summary":114,"references_raw":123,"kevs":165,"epss":182,"epss_history":185,"metrics":379,"affected":391},"CVE-2017-10271","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).",null,[11,18],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],{"_key":19,"id":19,"name":20,"description":21,"type":22,"status":23,"abstraction":24,"likelihood_of_exploit":25,"capec":26},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","weakness","Draft","Base","High",[27,31,35,39,43],{"id":28,"name":29,"techniques":30},"CAPEC-12","Choosing Message Identifier",[],{"id":32,"name":33,"techniques":34},"CAPEC-166","Force the System to Reset Values",[],{"id":36,"name":37,"techniques":38},"CAPEC-216","Communication Channel Manipulation",[],{"id":40,"name":41,"techniques":42},"CAPEC-36","Using Unpublished Interfaces or Functionality",[],{"id":44,"name":45,"techniques":46},"CAPEC-62","Cross Site Request Forgery",[],[48,57,71,79,88],{"_key":49,"name":50,"source":51,"url":52,"maturity":53,"reliability_score":54,"verified":55,"type":9,"platforms":56,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_C0MMAND3ROPSEC_CVE-2017-10271","Cve 2017 10271","github","https://github.com/c0mmand3rOpSec/CVE-2017-10271","poc",0.3,false,[],{"_key":58,"name":59,"source":60,"url":61,"maturity":62,"reliability_score":63,"verified":64,"type":65,"platforms":66,"requires_auth":9,"exploitdb":68,"metasploit":9},"43924","Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution (Metasploit)","exploit-database","https://www.exploit-db.com/exploits/43924","weaponized",0.8,true,"remote",[67],"multiple",{"verified":64,"type":65,"platform":67,"file":69,"codes":70},"exploits/multiple/remote/43924.rb",[7],{"_key":72,"name":73,"source":60,"url":74,"maturity":62,"reliability_score":63,"verified":64,"type":65,"platforms":75,"requires_auth":9,"exploitdb":76,"metasploit":9},"43458","Oracle WebLogic \u003C 10.3.6 - 'wls-wsat' Component Deserialisation Remote Command Execution","https://www.exploit-db.com/exploits/43458",[67],{"verified":64,"type":65,"platform":67,"file":77,"codes":78},"exploits/multiple/remote/43458.py",[7],{"_key":80,"name":81,"source":60,"url":82,"maturity":53,"reliability_score":83,"verified":55,"type":65,"platforms":84,"requires_auth":9,"exploitdb":85,"metasploit":9},"43392","Oracle WebLogic Server 10.3.6.0.0 / 12.x - Remote Command Execution","https://www.exploit-db.com/exploits/43392",0.5,[67],{"verified":55,"type":65,"platform":67,"file":86,"codes":87},"exploits/multiple/remote/43392.py",[7],{"_key":89,"name":90,"source":91,"url":92,"maturity":62,"reliability_score":93,"verified":64,"type":65,"platforms":94,"requires_auth":55,"exploitdb":9,"metasploit":95},"MSF_EXPLOIT_MULTI_HTTP_ORACLE_WEBLOGIC_WSAT_DESERIALIZATION_RCE","Oracle WebLogic wls-wsat Component Deserialization RCE","metasploit","https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/multi/http/oracle_weblogic_wsat_deserialization_rce.rb",1,[],{"fullname":96,"rank":97,"rank_name":98,"post_auth":55,"check":55,"notes":99},"exploit/multi/http/oracle_weblogic_wsat_deserialization_rce",600,"excellent",{"Stability":100,"SideEffects":102,"Reliability":104},[101],"unknown-stability",[103],"unknown-side-effects",[105],"unknown-reliability",[],[],[],[],[],"2017-10-19T17:00:00.000Z","2026-08-13T03:55:26.114Z","Analyzed",{"cisa_kev":64,"cisa_ransomware":64,"cisa_vendor":115,"epss_severity":116,"epss_score":117,"severity":118,"severity_score":119,"severity_version":120,"severity_source":121,"severity_vector":122,"severity_status":113},"Oracle Corporation","critical",0.99993,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[124,133,139,144,148,155,159],{"url":125,"sources":126,"tags":128},"https://www.exploit-db.com/exploits/43458/",[121,127],"nvd",[129,130,131,132],"Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry",{"url":134,"sources":135,"tags":136},"http://www.securitytracker.com/id/1039608",[121,127],[132,137,138,131],"X Refsource SECTRACK","Broken Link",{"url":140,"sources":141,"tags":142},"http://www.securityfocus.com/bid/101304",[121,127],[132,143,138,131],"X Refsource BID",{"url":52,"sources":145,"tags":146},[121,127],[147,129],"X Refsource MISC",{"url":149,"sources":150,"tags":151},"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",[121,127],[152,153,154],"X Refsource CONFIRM","Patch","Vendor Advisory",{"url":156,"sources":157,"tags":158},"https://www.exploit-db.com/exploits/43924/",[121,127],[129,130,131,132],{"url":160,"sources":161,"tags":162},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-10271",[121,127],[163,164],"Government Resource","US Government Resource",[166,173],{"source":167,"vendor":115,"product":168,"date_added":169,"vulnerability_name":9,"short_description":170,"required_action":9,"due_date":9,"known_ransomware_campaign_use":171,"notes":52,"exploitation_type":172},"enisa","WebLogic Server","2026-08-10","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security).","Known","ransomware",{"source":174,"vendor":175,"product":168,"date_added":176,"vulnerability_name":177,"short_description":178,"required_action":179,"due_date":180,"known_ransomware_campaign_use":171,"notes":181,"exploitation_type":9},"cisa","Oracle","2022-02-10","Oracle Corporation WebLogic Server Remote Code Execution Vulnerability","Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.","Apply updates per vendor instructions.","2022-08-10","https://nvd.nist.gov/vuln/detail/CVE-2017-10271",{"date":183,"score":117,"percentile":184},"2026-08-14",0.99987,[186,190,192,194,196,198,200,202,204,206,208,210,212,214,216,219,221,223,225,227,230,232,234,236,238,240,242,244,248,251,253,255,257,259,261,263,265,267,269,271,273,275,277,279,281,284,286,288,290,292,294,296,298,300,302,304,306,308,310,313,315,317,319,321,323,325,327,330,333,335,337,339,341,343,345,347,349,351,353,355,357,359,361,363,365,367,369,371,373,375],{"date":187,"score":188,"percentile":189},"2025-11-04",0.94439,0.99989,{"date":191,"score":188,"percentile":189},"2025-11-05",{"date":193,"score":188,"percentile":189},"2025-11-06",{"date":195,"score":188,"percentile":189},"2025-11-07",{"date":197,"score":188,"percentile":189},"2025-11-08",{"date":199,"score":188,"percentile":189},"2025-11-09",{"date":201,"score":188,"percentile":189},"2025-11-10",{"date":203,"score":188,"percentile":189},"2025-11-11",{"date":205,"score":188,"percentile":189},"2025-11-12",{"date":207,"score":188,"percentile":189},"2025-11-13",{"date":209,"score":188,"percentile":189},"2025-11-14",{"date":211,"score":188,"percentile":189},"2025-11-15",{"date":213,"score":188,"percentile":189},"2025-11-16",{"date":215,"score":188,"percentile":189},"2025-11-17",{"date":217,"score":188,"percentile":218},"2025-11-18",0.99998,{"date":220,"score":188,"percentile":218},"2025-11-19",{"date":222,"score":188,"percentile":218},"2025-11-20",{"date":224,"score":188,"percentile":184},"2025-11-21",{"date":226,"score":188,"percentile":184},"2025-11-22",{"date":228,"score":188,"percentile":229},"2025-11-23",0.99988,{"date":231,"score":188,"percentile":229},"2025-11-24",{"date":233,"score":188,"percentile":229},"2025-11-25",{"date":235,"score":188,"percentile":229},"2025-11-26",{"date":237,"score":188,"percentile":229},"2025-11-27",{"date":239,"score":188,"percentile":229},"2025-11-28",{"date":241,"score":188,"percentile":229},"2025-11-29",{"date":243,"score":188,"percentile":229},"2025-11-30",{"date":245,"score":246,"percentile":247},"2025-12-01",0.94403,0.99973,{"date":249,"score":246,"percentile":250},"2025-12-02",0.99974,{"date":252,"score":246,"percentile":250},"2025-12-03",{"date":254,"score":188,"percentile":229},"2025-12-04",{"date":256,"score":188,"percentile":229},"2025-12-05",{"date":258,"score":188,"percentile":229},"2025-12-06",{"date":260,"score":188,"percentile":229},"2025-12-07",{"date":262,"score":188,"percentile":229},"2025-12-08",{"date":264,"score":188,"percentile":229},"2025-12-09",{"date":266,"score":188,"percentile":229},"2025-12-10",{"date":268,"score":188,"percentile":229},"2025-12-11",{"date":270,"score":188,"percentile":229},"2025-12-12",{"date":272,"score":188,"percentile":229},"2025-12-13",{"date":274,"score":188,"percentile":229},"2025-12-14",{"date":276,"score":188,"percentile":229},"2025-12-15",{"date":278,"score":188,"percentile":229},"2025-12-16",{"date":280,"score":188,"percentile":229},"2025-12-17",{"date":282,"score":188,"percentile":283},"2025-12-18",0.99986,{"date":285,"score":188,"percentile":283},"2025-12-19",{"date":287,"score":188,"percentile":184},"2025-12-20",{"date":289,"score":188,"percentile":184},"2025-12-21",{"date":291,"score":188,"percentile":184},"2025-12-22",{"date":293,"score":188,"percentile":184},"2025-12-23",{"date":295,"score":188,"percentile":229},"2025-12-24",{"date":297,"score":188,"percentile":229},"2025-12-25",{"date":299,"score":188,"percentile":229},"2025-12-26",{"date":301,"score":188,"percentile":189},"2025-12-27",{"date":303,"score":188,"percentile":229},"2025-12-28",{"date":305,"score":188,"percentile":229},"2025-12-29",{"date":307,"score":188,"percentile":229},"2025-12-30",{"date":309,"score":188,"percentile":229},"2025-12-31",{"date":311,"score":246,"percentile":312},"2026-01-01",0.99975,{"date":314,"score":246,"percentile":312},"2026-01-02",{"date":316,"score":246,"percentile":312},"2026-01-03",{"date":318,"score":188,"percentile":184},"2026-01-04",{"date":320,"score":188,"percentile":184},"2026-01-05",{"date":322,"score":188,"percentile":184},"2026-01-06",{"date":324,"score":188,"percentile":184},"2026-01-07",{"date":326,"score":188,"percentile":184},"2026-01-08",{"date":328,"score":329,"percentile":312},"2026-01-09",0.9441,{"date":331,"score":329,"percentile":332},"2026-01-10",0.99976,{"date":334,"score":329,"percentile":332},"2026-01-11",{"date":336,"score":329,"percentile":332},"2026-01-12",{"date":338,"score":329,"percentile":332},"2026-01-13",{"date":340,"score":329,"percentile":332},"2026-01-14",{"date":342,"score":329,"percentile":332},"2026-01-15",{"date":344,"score":329,"percentile":332},"2026-01-16",{"date":346,"score":329,"percentile":332},"2026-01-17",{"date":348,"score":329,"percentile":312},"2026-01-18",{"date":350,"score":329,"percentile":312},"2026-01-19",{"date":352,"score":188,"percentile":283},"2026-01-20",{"date":354,"score":188,"percentile":283},"2026-01-21",{"date":356,"score":188,"percentile":283},"2026-01-22",{"date":358,"score":188,"percentile":283},"2026-01-23",{"date":360,"score":188,"percentile":283},"2026-01-24",{"date":362,"score":188,"percentile":184},"2026-01-25",{"date":364,"score":188,"percentile":184},"2026-01-26",{"date":366,"score":188,"percentile":184},"2026-01-27",{"date":368,"score":188,"percentile":184},"2026-01-28",{"date":370,"score":188,"percentile":184},"2026-01-29",{"date":372,"score":188,"percentile":184},"2026-01-30",{"date":374,"score":188,"percentile":184},"2026-01-31",{"date":376,"score":377,"percentile":378},"2026-02-01",0.94423,0.99981,[380,385],{"source":121,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":381,"cvss_v4_0":9},{"baseScore":119,"baseSeverity":382,"vectorString":122,"impactScore":383,"exploitabilityScore":384},"HIGH",6,10,{"source":127,"cvss_v2_0":386,"cvss_v3_0":9,"cvss_v3_1":390,"cvss_v4_0":9},{"baseScore":387,"baseSeverity":9,"vectorString":388,"impactScore":389,"exploitabilityScore":384},5,"AV:N/AC:L/Au:N/C:N/I:N/A:P",2.9,{"baseScore":119,"baseSeverity":382,"vectorString":122,"impactScore":383,"exploitabilityScore":384},[392,406],{"ecosystem":9,"name":168,"vendor":393,"product":394,"cpe_part":395,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":396},"oracle corporation","weblogic server","a",[397,400,402,404],{"version":398,"is_range":55,"range_type":121,"version_start":398,"version_start_type":399,"version_end":398,"version_end_type":399,"fixed_in":9},"10.3.6.0.0","including",{"version":401,"is_range":55,"range_type":121,"version_start":401,"version_start_type":399,"version_end":401,"version_end_type":399,"fixed_in":9},"12.1.3.0.0",{"version":403,"is_range":55,"range_type":121,"version_start":403,"version_start_type":399,"version_end":403,"version_end_type":399,"fixed_in":9},"12.2.1.1.0",{"version":405,"is_range":55,"range_type":121,"version_start":405,"version_start_type":399,"version_end":405,"version_end_type":399,"fixed_in":9},"12.2.1.2.0",{"ecosystem":9,"name":168,"vendor":407,"product":408,"cpe_part":395,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":409},"oracle","weblogic_server",[410,412,413,414],{"version":398,"is_range":55,"range_type":411,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"cpe",{"version":401,"is_range":55,"range_type":411,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":403,"is_range":55,"range_type":411,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":405,"is_range":55,"range_type":411,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9}]