Sploitus

CVE-2017-10271

47 known exploits for CVE-2017-10271

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Affected products
Oracle Weblogic Server
Oracle Weblogic Server
= 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0
CVSS 3.1
7.5 HIGH
EPSS
100.0% (100th percentile)
Weakness
CWE-306
NVD status
Analyzed
Published
2017-10-19
CVE-2017-10271 at NVD
Authoritative description, scoring and affected products

47 known exploits for CVE-2017-10271

Proof-of-concept code and exploit modules indexed by Sploitus

Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2026-05-27 DungsocoolGITHUB
📄 Oracle WebLogic WLS-WSAT XMLDecoder Remote Code Execution
2026-05-11 indoushkaPACKETSTORM
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2025-10-15 seoyoung-kangGITHUB
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2025-07-27 mirrors_jas502nGITEE
Exploit for Improper Input Validation in Joomla Joomla\!
2025-07-27 mirrors_SecWikiGITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2025-07-06 mirrors_kingkakiGITEE
Exploit for Improper Access Control in Oracle Communications_Diameter_Signaling_Router
2021-05-31 pizza-powerGITHUB
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2021-05-24 dlcfGITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2021-05-07 sixhjGITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2021-03-30 sh3llsasGITEE
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 KitPloitKITPLOIT
Exploit for Code Injection in Microsoft
2020-11-27 ZardccccGITEE
Exploit for Code Injection in Microsoft
2020-11-25 简爱GITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2020-11-18 Al1exGITHUB
Exploit for Code Injection in Microsoft
2020-11-17 baozhazhiziGITEE
Exploit for Improper Input Validation in Joomla Joomla\!
2020-10-21 小义的爸爸GITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2020-10-05 0xdawnGITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2020-10-05 0xdawnGITEE
Exploit for Improper Input Validation in Joomla Joomla\!
2020-09-13 chenGITEE
Exploit for Improper Input Validation in Joomla Joomla\!
2020-05-26 CysecGITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2020-05-19 cjwGITEE
Exploit for Improper Input Validation in Joomla Joomla\!
2020-03-11 朽木GITEE
Exploit for Improper Input Validation in Joomla Joomla\!
2019-10-09 KTF_songGITEE
Exploit for Injection in Oracle Agile_Plm
2019-08-23 pimpsGITHUB
Sn1per v7.0 - Automated Pentest Framework For Offensive Security Experts
2019-05-12 KitPloitKITPLOIT
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2019-05-08 Web安全技术GITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2019-04-25 SkyBlueEternalGITHUB
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2019-03-20 kbsecGITHUB
Jok3R - Network And Web Pentest Framework
2019-01-23 KitPloitKITPLOIT
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2018-12-13 ETOCheneyGITHUB
Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution Exploit
2018-01-29 metasploitZDT
Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution (Metasploit)
2018-01-29 MetasploitEXPLOITDBRuby
Oracle WebLogic wls-wsat Component Deserialization Remote Code Execution
2018-01-28 Alexey TyurinPACKETSTORMRuby
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2018-01-18 SuperHacker-liuanGITHUB
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2018-01-16 pssssGITHUB
Oracle WebLogic < 10.3.6 - wls-wsat Component Deserialisation Remote Command Execution Exploit
2018-01-08 Kevin KirscheZDTPython
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2018-01-05 kkirscheGITHUB
Oracle WebLogic wls-wsat Component Deserialization RCE
2018-01-05 Kevin Kirsche <d3c3pt10n[AT]deceiveyour.team>, Luffin, Alexey Tyurin, Federico DottaMETASPLOITRuby
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2018-01-03 cjjduckGITHUB
Oracle WebLogic 10.3.6 - wls-wsat Component Deserialisation Remote Command Execution
2018-01-03 Kevin KirscheEXPLOITPACKPython
Oracle WebLogic < 10.3.6 - 'wls-wsat' Component Deserialisation Remote Command Execution
2018-01-03 Kevin KirscheEXPLOITDBPython
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2017-12-28 LuffinGITHUB
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2017-12-28 c0mmand3rOpSecGITHUB
Oracle WebLogic Server 10.3.6.0.0 12.x - Remote Command Execution
2017-12-26 1337gEXPLOITPACKPython
Oracle WebLogic Server 10.3.6.0.0 / 12.x - Remote Command Execution
2017-12-26 1337gEXPLOITDBPython
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2017-12-23 1337gGITHUB
Oracle WebLogic wls-wsat RCE(CVE-2017-10271)
2017-12-22 My SeebugSEEBUGPython