EXPOSURES › CVE-2017-10271
CVE-2017-10271
CRITICAL ⌖ ON CISA KEV · EXPLOITED
DETAIL
⚡ RCE
⌖ EXPLOITED IN THE WILD
SHAME 95/100
ransomwarerceexploited-in-wild
Oracle WebLogic Server had a remotely exploitable code execution vulnerability actively linked to ransomware attacks.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
PLAYERS IMPLICATED
DESCRIPTION
Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.
SENTIMENT · TRUSTED SOURCES
synthesis
neutral
+0.00
No sentiment expressed; sources are vulnerability databases and breach trackers with no commentary on Oracle's handling.
Neutral; NVD entry states facts without sentiment.
"Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution."
Neutral; Vulnpedia is a vulnerability reference site with no commentary on Oracle.
Neutral; OpenCVE is a vulnerability database with no commentary on Oracle.
Neutral; Recent Breaches is a breach tracker with no commentary on Oracle.
Neutral; Shodan CVEDB is a vulnerability dashboard with no commentary on Oracle.
Neutral; XposedOrNot is a breach directory with no commentary on Oracle.
AFFECTED FEDRAMP PRODUCTS · 10
| PRODUCT | STATUS |
|---|---|
| Aconex for Defense Oracle |
Authorized |
| Federal Managed Cloud Services Oracle |
Authorized |
| Fusion Cloud Oracle |
Authorized |
| Government Cloud - Common Controls Oracle |
Authorized |
| Oracle Cloud Infrastructure-Government Cloud Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) Oracle |
Authorized |
| Oracle Enterprise Performance Management (EPM) - Moderate Oracle |
In Process |
| Oracle Service Cloud Oracle |
Authorized |
| Oracle Service Cloud (DOD) Oracle |
Authorized |
| Taleo Cloud - U.S. Government Cloud Oracle |
Authorized |