Known Exploited Vulnerabilities June 03, 2024 · CISA KEV Catalog

CVE-2017-3506: Oracle Web Logic Server OS Command Injection Vulnerability

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2017-3506Oracle

Related

CVE-2026-21962: Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Known Exploited Vulnerabilities · Aug 24, 2026

CVE-2026-46817: Oracle E-Business Suite Improper Privilege Management Vulnerability Known Exploited Vulnerabilities · Jul 15, 2026

CVE-2026-35273: Oracle People Soft Enterprise People Tools Missing Authentication for Critical Function Vulnerability Known Exploited Vulnerabilities · Jun 12, 2026