{"id":"CVE-2018-3245","published":"2018-10-17T01:00:00Z","modified":"2024-10-02T19:31:52Z","title":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)","vendor":"Oracle Corporation","product":"WebLogic Server","tier":"core","eol":null,"affectedVersions":[{"vendor":"Oracle Corporation","product":"WebLogic Server","versions":["10.3.6.0","12.1.3.0","12.2.1.3"]}],"description":{"text":"Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw lies in the WLS Core Components subcomponent of the Oracle WebLogic Server component within Oracle Fusion Middleware, affecting supported versions 10.3.6.0, 12.1.3.0 and 12.2.1.3. An unauthenticated attacker with network access via the T3 protocol can easily exploit it to take over the Oracle WebLogic Server, with no user interaction or special configuration required.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:17:57Z"},"cvss":null,"epss":{"score":0.94281,"percentile":0.9985,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/105613","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securitytracker.com/id/1041896","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://www.exploit-db.com/exploits/46513/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-15100","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-15100","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":46513,"url":"https://www.exploit-db.com/exploits/46513","title":"Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass)","type":"remote","platform":"multiple","date":"2018-10-25","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2018-10-25"},"pocGithub":{"count":3,"skipped":0,"earliest":"2018-10-24","earliestUrl":"https://github.com/pyn3rd/CVE-2018-3245","repos":[{"name":"pyn3rd/CVE-2018-3245","url":"https://github.com/pyn3rd/CVE-2018-3245","stars":172,"created":"2018-10-24"},{"name":"jas502n/CVE-2018-3245","url":"https://github.com/jas502n/CVE-2018-3245","stars":14,"created":"2018-10-25"},{"name":"ianxtianxt/CVE-2018-3245","url":"https://github.com/ianxtianxt/CVE-2018-3245","stars":2,"created":"2019-11-05"}]},"first":{"date":"2018-10-24","source":"PoC-in-GitHub","url":"https://github.com/pyn3rd/CVE-2018-3245"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/46513/"],"flow":[],"timeline":[{"date":"2018-10-17","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-3245","provenance":"source"},{"date":"2018-10-24","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub; later: Exploit-DB 2018-10-25","url":"https://github.com/pyn3rd/CVE-2018-3245","provenance":"source"}],"speed":{"daysToPublicExploit":7,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":25.0,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.97,"detail":"percentile 0.9985"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 1 Exploit-DB entry; 3 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}