cve/2014/CVE-2014-4242.md

CVE-2014-4242

Description

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0, 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote attackers to affect integrity via unknown vectors related to Console.

POC

Reference

• http://seclists.org/fulldisclosure/2014/Dec/23
• http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
• http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/CrackerCat/myhktools
• https://github.com/GhostTroops/myhktools
• https://github.com/ZH3FENG/Weblogic_SSRF
• https://github.com/do0dl3/myhktools
• https://github.com/hanc00l/some_pocsuite
• https://github.com/hktalent/myhktools
• https://github.com/iqrok/myhktools
• https://github.com/touchmycrazyredhat/myhktools
• https://github.com/trhacknon/myhktools
• https://github.com/zzwlpx/weblogic