Description
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect confidentiality via vectors related to WLS - Web Services.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 5 repositories
-
daybreak-kits/weblogicScanner ★ 2,079 · Jan 15, 2020
weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力:CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252…
-
NoneNotNull/SSRFX ★ 98 · Mar 10, 2017
CVE-2014-4210+Redis未授权访问
-
NHPT/WebLogic-SSRF_CVE-2014-4210 ★ 11 · Nov 19, 2020
Weblogic SearchPublicRegistries SSRF(CVE-2014-4210) Exploit Script based on Python3
-
unmanarc/CVE-2014-4210-SSRF-PORTSCANNER-POC ★ 3 · Jul 21, 2020
CVE-2014-4210 SSRF PORTSCANNER PoC
-
ZorvithonLeo/Exploit-CVE-2014-4210- ★ 2 · Feb 9, 2025
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Oracle Weblogic - Server-Side Request Forgery http/cves/2014/CVE-2014-4210.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities mailing-list
- oracle-cpujul2014-cve20144210(94554) vdb-entry
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- 68629 vdb-entry
- 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities mailing-list