Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusThis script is Copyright (C) 2015-2024 and is owned by Tenable, Inc. or an Affiliate thereof.ORACLE_WEBLOGIC_SERVER_CPU_APR_2015.NBIN
HistoryApr 16, 2015 - 12:00 a.m.

Oracle WebLogic Server Multiple Vulnerabilities (April 2015 CPU) (POODLE)

2015-04-1600:00:00
This script is Copyright (C) 2015-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
9

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

3.4 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

0.975 High

EPSS

Percentile

100.0%

JSON

The remote host has a version of Oracle WebLogic Server installed that is affected by multiple vulnerabilities :

  • A man-in-the-middle (MitM) information disclosure vulnerability exists known as POODLE. The vulnerability is due to the way SSL 3.0 handles padding bytes when decrypting messages encrypted using block ciphers in cipher block chaining (CBC) mode. MitM attackers can decrypt a selected byte of a cipher text in as few as 256 tries if they are able to force a victim application to repeatedly send the same data over newly created SSL 3.0 connections. (CVE-2014-3566)

  • An unspecified flaw exist in the Console subcomponent which a remote attacker can exploit to impact integrity.
    (CVE-2015-0449)

  • An unspecified flaw exists in the WLS-WebServices subcomponent which an authenticated, remote attacker can exploit to affect confidentiality, integrity, and availability. (CVE-2015-0482)

Binary data oracle_weblogic_server_cpu_apr_2015.nbin
VendorProductVersionCPE
oracleweblogic_servercpe:/a:oracle:weblogic_server
oraclefusion_middlewarecpe:/a:oracle:fusion_middleware

Related

nvd 2
prion 3
cve 2
cvelist 3
nessus 42
openvas 21
fedora 17
ibm 83
veracode 3
seebug 1
citrix 1
osv 2
redhat 3
amazon 1
f5 1
hackerone 2
cert 1
suse 1
cisco 1
centos 1
fortinet 1
checkpoint_security 1
securityvulns 2
freebsd 1
debian 1
aix 1
huawei 1
nvd
nvd
CVE-2015-0482
2015-04-16 16:59:34
CVE-2015-0449
2015-04-16 16:59:08
prion
prion
Design/Logic Flaw
2015-04-16 16:59:00
Design/Logic Flaw
2015-04-16 16:59:00
Code injection
2014-10-15 00:55:00
cve
cve
CVE-2015-0482
2015-04-16 16:59:34
CVE-2015-0449
2015-04-16 16:59:08
cvelist
cvelist
CVE-2015-0482
2015-04-16 16:00:00
CVE-2015-0449
2015-04-16 16:00:00
CVE-2014-3566
2014-10-15 00:00:00
nessus
nessus
Cisco Wireless LAN Controllers 5500 Series (POODLE)
2014-12-03 00:00:00
SuSE 11.3 Security Update : suseRegister (SAT Patch Number 10008)
2015-01-06 00:00:00
Fedora 20 : libuv-0.10.29-1.fc20 / nodejs-0.10.33-1.fc20 (2014-15379) (POODLE)
2014-12-15 00:00:00
openvas
openvas
Fedora Update for nodejs FEDORA-2014-15379
2014-12-15 00:00:00
Fedora Update for python-rhsm FEDORA-2014-13781
2014-11-07 00:00:00
SUSE: Security Advisory for suseRegister (SUSE-SU-2015:0010-1)
2015-10-13 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: python-rhsm-1.13.6-1.fc21
2014-11-10 06:34:40
[SECURITY] Fedora 21 Update: libetpan-1.6-1.fc21
2014-11-10 06:34:14
[SECURITY] Fedora 20 Update: claws-mail-plugins-3.11.1-1.fc20
2014-11-10 06:30:28
ibm
ibm
Security Bulletin: Vulnerability in SSLv3 affects TS3310 (CVE-2014-3566)
2018-06-18 00:08:53
Security Bulletin: Vulnerability in SSLv3 affects IBM i (CVE-2014-3566)
2019-12-18 14:26:38
Security Bulletin: Vulnerability in SSLv3 affects Rational DOORS Web Access (CVE-2014-3566)
2020-05-01 08:19:24
veracode
veracode
Information Disclosure
2017-02-07 00:05:45
Information Disclosure
2019-01-15 08:54:41
POODLE Attack
2017-04-27 06:54:17
seebug
seebug
SSL 3.0 POODLE（CVE-2014-3566）
2017-02-17 00:00:00
citrix
citrix
CVE-2014-3566 - Citrix Security Advisory for SSLv3 Protocol Flaw
2014-10-14 04:00:00
osv
osv
lighttpd - security update
2015-07-25 00:00:00
lighttpd - security update
2016-02-23 00:00:00
redhat
redhat
(RHSA-2015:1546) Important: node.js security update
2015-08-04 00:00:00
(RHSA-2014:1653) Moderate: openssl security update
2014-10-16 00:00:00
(RHSA-2015:1545) Important: node.js security update
2015-08-04 00:00:00
amazon
amazon
Important: openssl
2014-10-14 22:32:00
f5
f5
K15702 : SSLv3 vulnerability CVE-2014-3566
2015-09-18 00:00:00
hackerone
hackerone
New Relic: SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
2017-03-26 19:08:23
MariaDB: smtp service vulnerable to POODLE SSLv3
2019-03-24 06:26:55
cert
cert
POODLE vulnerability in SSL 3.0
2014-10-17 00:00:00
suse
suse
Security update for suseRegister (important)
2015-01-05 21:04:43
cisco
cisco
SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability
2014-10-15 18:30:00
centos
centos
openssl security update
2014-10-16 15:21:39
fortinet
fortinet
SSL v3 "POODLE" Vulnerability
2014-10-15 00:00:00
checkpoint_security
checkpoint_security
Check Point response to the POODLE Bites vulnerability (CVE-2014-3566)
2014-10-13 21:00:00
securityvulns
securityvulns
APPLE-SA-2014-10-16-4 OS X Server v3.2.2
2014-10-18 00:00:00
TA14-290A: SSL 3.0 Protocol Vulnerability and POODLE Attack
2014-10-18 00:00:00
freebsd
freebsd
asterisk -- Asterisk Susceptibility to POODLE Vulnerability
2014-10-20 00:00:00
debian
debian
[SECURITY] [DSA 3489-1] lighttpd security update
2016-02-23 18:26:27
aix
aix
Vulnerability in SSLv3 affects AIX,Vulnerability in SSLv3 affects VIOS
2015-06-17 09:52:06
huawei
huawei
Security Advisory-SSLv3 POODLE Vulnerability in Huawei Products
2014-12-15 00:00:00

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

3.4 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

0.975 High

EPSS

Percentile

100.0%

JSON
Related for ORACLE_WEBLOGIC_SERVER_CPU_APR_2015.NBIN
nvd2prion3cve2cvelist3nessus42openvas21fedora17ibm83veracode3seebug1citrix1osv2redhat3amazon1f51hackerone2cert1suse1cisco1centos1fortinet1checkpoint_security1securityvulns2freebsd1debian1aix1huawei1