Allele Security Intelligence

ASA-2019-00370 – Oracle WebLogic Server: Deserialization vulnerability via XMLDecoder

Posted on June 21, 2019October 17, 2019 by Allele Security Intelligence in Alerts

A deserialization vulnerability via XMLDecoder in Oracle WebLogic Server Web Services. This remote code execution vulnerability is remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password.

ASA-2019-00239 – WebLogic: wls9_async and wls-wsat components trigger deserialization remote command execution vulnerability

Posted on April 30, 2019May 12, 2019 by Allele Security Intelligence in Alerts

This remote code execution vulnerability is remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password.