Every CVE Search/ Get API key

CVE-2017-10271

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:...

7.5 HighIn KEVPublic exploit

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

100.0%Up 65.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2017-10271
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-306
Updated
2026-11-02
CVE List 7.5

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Record
CVE-2017-10271
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-306
Updated
2026-11-02
EUVDEUVD-2017-1918 7.5

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Record
EUVD-2017-1918
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-h7p4-68h5-84f3 7.5

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:...

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Record
GHSA-h7p4-68h5-84f3
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-306
Updated
2026-11-02
CISA KEV No score

Oracle Corporation WebLogic Server Remote Code Execution Vulnerability

Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.

Record
CVE-2017-10271
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitOracle WebLogic wls-wsat Component Deserialization RCE2017-10-19
PoC in GitHub1337g/CVE-2017-102712017-12-23
PoC in GitHubZH3FENG/PoCs-Weblogic_2017_102712017-12-25
PoC in GitHubs3xy/CVE-2017-102712017-12-25
Exploit-DBOracle WebLogic Server 10.3.6.0.0 / 12.x - Remote Command Execution2017-12-26
PoC in GitHubLuffin/CVE-2017-102712017-12-28
PoC in GitHubc0mmand3rOpSec/CVE-2017-102712017-12-28
Exploit-DBOracle WebLogic < 10.3.6 - 'wls-wsat' Component Deserialisation Remote Command Execution2018-01-03
PoC in GitHubcjjduck/weblogic_wls_wsat_rce2018-01-03
PoC in GitHubkkirsche/CVE-2017-102712018-01-05
Show 20 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubpssss/CVE-2017-102712018-01-16
PoC in GitHubSuperHacker-liuan/cve-2017-10271-poc2018-01-18
PoC in GitHubpeterpeter228/Oracle-WebLogic-CVE-2017-102712018-01-19
Exploit-DBOracle WebLogic - wls-wsat Component Deserialization Remote Code Execution (Metasploit)2018-01-29
PoC in GitHubCymmetria/weblogic_honeypot2018-02-07
PoC in GitHubJackyTsuuuy/weblogic_wls_rce_poc-exp2018-03-01
PoC in GitHublonehand/Oracle-WebLogic-CVE-2017-10271-master2018-07-06
PoC in GitHubshack2/javaserializetools2018-09-13
PoC in GitHubETOCheney/JavaDeserialization2018-12-13
PoC in GitHubr4b3rt/CVE-2017-102712018-12-20
PoC in GitHubcved-sources/cve-2017-102712019-01-11
PoC in GitHubXHSecurity/Oracle-WebLogic-CVE-2017-102712019-03-15
PoC in GitHubkbsec/Weblogic_Wsat_RCE2019-03-20
PoC in GitHub7kbstorm/WebLogic_CNVD_C2019_488142019-04-25
PoC in GitHubSkyBlueEternal/CNVD-C-2019-48814-CNNVD-201904-9612019-04-25
PoC in GitHubYuusuke4/WebLogic_CNVD_C_2019_488142019-04-25
PoC in GitHubianxtianxt/-CVE-2017-10271-2019-11-05
PoC in GitHubtestwc/CVE-2017-102712020-04-06
PoC in GitHubAl1ex/CVE-2017-102712020-11-18
NucleiOracle WebLogic Server - Remote Command Execution

Plus 5 more. The full list has every link.

History

History
RecordedChangedSources
exploitation
exploits, exploits_more
exploits
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-10271 is a high vulnerability (CVSS 7.5) in Oracle Weblogic Server, published October 19, 2017. CISA lists it as known to be exploited, since February 10, 2022. EUVD reports exploitation since February 10, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 100.0%, the 99th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open