{"uuid": "358c9f87-7776-46fc-8744-a36e8197a77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-10271", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/oracle_weblogic_wsat_deserialization_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Kevin Kirsche \", \"Luffin\", \"Alexey Tyurin\", \"Federico Dotta\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"The Oracle WebLogic WLS WSAT Component is vulnerable to a XML Deserialization\\n          remote code execution vulnerability. Supported versions that are affected are\\n          10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Discovered by Alexey Tyurin\\n          of ERPScan and Federico Dotta of Media Service. Please note that SRVHOST, SRVPORT,\\n          HTTP_DELAY, URIPATH and related HTTP Server variables are only used when executing a check\\n          and will not be used when executing the exploit itself.\", \"disclosure_date\": \"2017-10-19\", \"fullname\": \"exploit/multi/http/oracle_weblogic_wsat_deserialization_rce\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"Oracle WebLogic wls-wsat Component Deserialization RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/oracle_weblogic_wsat_deserialization_rce.rb\", \"platform\": \"Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/oracle_weblogic_wsat_deserialization_rce\", \"references\": [\"URL-https://www.oracle.com/technetwork/topics/security/cpuoct2017-3236626.html\", \"URL-https://github.com/Luffin/CVE-2017-10271\", \"URL-https://github.com/kkirsche/CVE-2017-10271\", \"CVE-2017-10271\", \"EDB-43458\"], \"rport\": 7001, \"session_types\": false, \"targets\": [\"Windows Command payload\", \"Unix Command payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:06.678955Z"}