E18-0lhp1
CVSS:
9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
False Positive:
f
Variants:
1
Year:
2018
Description
An insecure deserialization vulnerability was found in Oracle WebLogic Server.
This vulnerability is due to insufficient validation of serialized data within T3 requests.
The vulnerability can be exploited by sending a specially crafted serialized object. The vulnerability does not require authentication.
Successful exploitation can result in arbitrary code execution in the context of the user running the WebLogic server.
