{"cvss":7.4,"datePublished":"2024-06-03","dateUpdated":"2024-06-03","description":"Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document.","dueDate":"2024-06-24","id":"CVE-2017-3506","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://www.oracle.com/security-alerts/cpuapr2017.html; https://nvd.nist.gov/vuln/detail/CVE-2017-3506","product":"WebLogic Server","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"HIGH","source":"cisa_known_exploited","title":"Oracle WebLogic Server OS Command Injection Vulnerability","vendor":"Oracle"}