Patch Reviews - Middleware (MOSC)

MOSC Banner

Concern on vulnerabilities remediation for 11g and 12c


Hi Team,

We have received below vulnerabilities for couple of servers which is running with WebLogic 11g version. But just i want to know if these vulnerabilities needs to be applied for other WebLogic version(12c) servers for same application?


Vulnerability
CVE
Oracle WebLogic Java Object Deserialization RCECVE-2015-4852
Oracle WebLogic Server Java Object Deserialization RCE (April 2016 CPU)CVE-2016-0638
Oracle WebLogic Server Java Object Deserialization RCE (July 2016 CPU)CVE-2016-3510
Oracle WebLogic Server Java Object Deserialization RCE (October 2016 CPU)CVE-2016-5535
Oracle WebLogic Java Object RMI Connect-Back Deserialization RCE (January 2017 CPU)CVE-2017-3248
Oracle WebLogic Server Deserialization RCE (CVE-2018-2628)

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center