CVE-2016-0574: High severity oracle weblogic server vulnerability

Published Jan 21, 2016

Updated

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-0577.

Affected Software

4 affected components

ORACLE WebLogic Server=10.3.6.0.0

ORACLE WebLogic Server=12.1.2.0.0

ORACLE WebLogic Server=12.1.3.0.0

ORACLE WebLogic Server=12.2.1.0.0

Event History

Jan 21, 2016

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0574?

CVE-2016-0574 has not been assigned a specific severity rating but allows remote attackers to compromise confidentiality, integrity, and availability.

What versions of Oracle WebLogic Server are affected by CVE-2016-0574?

CVE-2016-0574 affects Oracle WebLogic Server versions 10.3.6, 12.1.2, 12.1.3, and 12.2.1.

How do I fix CVE-2016-0574?

To fix CVE-2016-0574, you should apply the latest patch or update available from Oracle for your affected WebLogic Server version.

Can CVE-2016-0574 be exploited remotely?

Yes, CVE-2016-0574 can be exploited remotely through vulnerabilities in WLS Core Components.

Is CVE-2016-0574 related to any other vulnerabilities?

CVE-2016-0574 is a different vulnerability than CVE-2016-0577, but both affect the Oracle WebLogic Server.