Sploitus

CVE-2017-10271

76 known exploits for CVE-2017-10271

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Affected products
Oracle Weblogic Server
Oracle Weblogic Server
= 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0
CVSS 3.1
7.5 HIGH
EPSS
100.0% (100th percentile)
Weakness
CWE-306
NVD status
Analyzed
Published
2017-10-19
CVE-2017-10271 at NVD
Authoritative description, scoring and affected products

76 known exploits for CVE-2017-10271

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2017-10271
2026-08-28 KitPloitKITPLOIT
weblogic_honeypot
2026-08-28 KitPloitKITPLOIT
JavaDeserialization
2026-08-28 KitPloitKITPLOIT
CVE-2017-10271
2026-08-28 KitPloitKITPLOIT
weblogic_wls_wsat_rce
2026-08-28 KitPloitKITPLOIT
weblogic-XMLDecoder
2026-08-28 KitPloitKITPLOIT
weblogic_wls_rce_poc-exp
2026-08-28 KitPloitKITPLOIT
cve-2017-10271-poc
2026-08-27 KitPloitKITPLOIT
Oracle-WebLogic-CVE-2017-10271
2026-08-27 KitPloitKITPLOIT
PoCs-Weblogic_2017_10271
2026-08-27 KitPloitKITPLOIT
CVE-2017-10271
2026-08-27 KitPloitKITPLOIT
CVE-2017-10271
2026-08-27 KitPloitKITPLOIT
CVE-2017-10271
2026-08-27 KitPloitKITPLOIT
CVE-2019-2725
2026-08-27 KitPloitKITPLOIT
CVE-2017-10271
2026-08-27 KitPloitKITPLOIT
Weblogic_Wsat_RCE
2026-08-27 KitPloitKITPLOIT
-CVE-2017-10271-
2026-08-27 KitPloitKITPLOIT
CVE-2017-10271
2026-08-27 KitPloitKITPLOIT
Cybersecurity-Capstone-Project
2026-08-27 KitPloitKITPLOIT
CVE-2017-10271
2026-08-27 KitPloitKITPLOIT
CVE-2017-10271
2026-08-27 KitPloitKITPLOIT
exphub
2026-08-27 KitPloitKITPLOIT
weblogicScanner
2026-08-26 KitPloitKITPLOIT
WebLogic_CNVD_C_2019_48814
2026-08-26 KitPloitKITPLOIT
Oracle-WebLogic-CVE-2017-10271
2026-08-26 KitPloitKITPLOIT
Oracle-WebLogic-CVE-2017-10271-master
2026-08-26 KitPloitKITPLOIT
cve-2017-10271
2026-08-26 KitPloitKITPLOIT
CVE-2017-10271
2026-08-26 KitPloitKITPLOIT
CVE-2017-10271
2026-08-26 KitPloitKITPLOIT
WebLogic_CNVD_C2019_48814
2026-08-24 KitPloitKITPLOIT
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2026-05-27 DungsocoolGITHUB
📄 Oracle WebLogic WLS-WSAT XMLDecoder Remote Code Execution
2026-05-11 indoushkaPACKETSTORM
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2025-10-15 seoyoung-kangGITHUB
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2025-07-27 mirrors_jas502nGITEE
Exploit for Improper Input Validation in Joomla Joomla!
2025-07-27 mirrors_SecWikiGITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2025-07-06 mirrors_kingkakiGITEE
Exploit for Improper Access Control in Oracle Communications_Diameter_Signaling_Router
2021-05-31 pizza-powerGITHUB
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2021-05-24 dlcfGITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2021-05-07 sixhjGITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2021-03-30 sh3llsasGITEE
Exploit for Code Injection in Microsoft
2020-11-27 ZardccccGITEE
Exploit for Code Injection in Microsoft
2020-11-25 简爱GITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2020-11-18 Al1exGITHUB
Exploit for Code Injection in Microsoft
2020-11-17 baozhazhiziGITEE
Exploit for Improper Input Validation in Joomla Joomla!
2020-10-21 小义的爸爸GITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2020-10-05 0xdawnGITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2020-10-05 0xdawnGITEE
Exploit for Improper Input Validation in Joomla Joomla!
2020-09-13 chenGITEE
Exploit for Improper Input Validation in Joomla Joomla!
2020-05-26 CysecGITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2020-05-19 cjwGITEE
Exploit for Improper Input Validation in Joomla Joomla!
2020-03-11 朽木GITEE
Exploit for Improper Input Validation in Joomla Joomla!
2019-10-09 KTF_songGITEE
Exploit for Injection in Oracle Agile_Plm
2019-08-23 pimpsGITHUB
Sn1per v7.0 - Automated Pentest Framework For Offensive Security Experts
2019-05-12 KitPloitKITPLOIT
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2019-05-08 Web安全技术GITEE
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2019-04-25 SkyBlueEternalGITHUB
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2019-03-20 kbsecGITHUB
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2018-12-13 ETOCheneyGITHUB
Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution (Metasploit)
2018-01-29 MetasploitEXPLOITDBRuby
Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution Exploit
2018-01-29 metasploitZDT
Oracle WebLogic wls-wsat Component Deserialization Remote Code Execution
2018-01-28 Alexey TyurinPACKETSTORMRuby
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2018-01-18 SuperHacker-liuanGITHUB
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2018-01-16 pssssGITHUB
Oracle WebLogic < 10.3.6 - wls-wsat Component Deserialisation Remote Command Execution Exploit
2018-01-08 Kevin KirscheZDTPython
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2018-01-05 kkirscheGITHUB
Oracle WebLogic 10.3.6 - wls-wsat Component Deserialisation Remote Command Execution
2018-01-03 Kevin KirscheEXPLOITPACKPython
Oracle WebLogic < 10.3.6 - 'wls-wsat' Component Deserialisation Remote Command Execution
2018-01-03 Kevin KirscheEXPLOITDBPython
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2018-01-03 cjjduckGITHUB
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2017-12-28 LuffinGITHUB
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2017-12-28 c0mmand3rOpSecGITHUB
Oracle WebLogic Server 10.3.6.0.0 12.x - Remote Command Execution
2017-12-26 1337gEXPLOITPACKPython
Oracle WebLogic Server 10.3.6.0.0 / 12.x - Remote Command Execution
2017-12-26 1337gEXPLOITDBPython
Exploit for Missing Authentication for Critical Function in Oracle Weblogic_Server
2017-12-23 1337gGITHUB
Oracle WebLogic wls-wsat RCE(CVE-2017-10271)
2017-12-22 My SeebugSEEBUGPython
CVE-2017-10271
2017-10-19 oracleUNKNOWN
Oracle WebLogic wls-wsat Component Deserialization RCE
2017-10-19 Kevin Kirsche <d3c3pt10n[AT]deceiveyour.team>, Luffin, Alexey Tyurin, Federico DottaMETASPLOITRuby