漏洞描述
The Oracle WebLogic Server component of Oracle Fusion Middleware (Web Services) versions 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2 is susceptible to a difficult to exploit vulnerability that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
hackerone.comhttps://hackerone.com/reports/810778↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2017-3506↗www.oracle.comhttp://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html↗www.securitytracker.comhttp://www.securitytracker.com/id/1038296↗github.comhttps://github.com/CVEDB/top↗