CVE-2016-3510
First published: Thu Jul 21 2016(Updated: )
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle WebLogic Server | =10.3.6.0.0 | |
| Oracle WebLogic Server | =12.1.3.0.0 | |
| Oracle WebLogic Server | =12.2.1.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/152324/Oracle-Weblogic-Server-Deserialization-MarshalledObject-Remote-Code-Execution.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- http://www.securityfocus.com/bid/91787
- http://www.securitytracker.com/id/1036373
- https://www.tenable.com/security/research/tra-2016-21
Frequently Asked Questions
What is the severity of CVE-2016-3510?
CVE-2016-3510 is considered a critical vulnerability that affects the confidentiality, integrity, and availability of Oracle WebLogic Server.
How do I fix CVE-2016-3510?
To fix CVE-2016-3510, it is recommended to apply the latest security patches provided by Oracle for the affected WebLogic Server versions.
Which versions of Oracle WebLogic Server are affected by CVE-2016-3510?
CVE-2016-3510 affects Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, and 12.2.1.0.
What types of attacks can exploit CVE-2016-3510?
CVE-2016-3510 can be exploited by remote attackers to compromise the confidentiality, integrity, and availability of the server.
Is CVE-2016-3510 related to other vulnerabilities in WebLogic Server?
Yes, CVE-2016-3510 is a different vulnerability than CVE-2016-3586, although they both affect the same Oracle WebLogic Server component.
- agent/type
- agent/softwarecombine
- agent/severity
- agent/remedy
- agent/references
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle weblogic server
- version/oracle weblogic server/10.3.6.0.0
- version/oracle weblogic server/12.1.3.0.0
- version/oracle weblogic server/12.2.1.0.0