{"vulnerability": "CVE-2017-3248", "sightings": [{"uuid": "077d08c0-3d81-409e-831e-df9ec049446f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "seen", "source": "MISP/5a4ecbf4-1b24-4a5f-9f4d-4b7c98036464", "content": "", "creation_timestamp": "2018-01-05T01:08:44.000000Z"}, {"uuid": "17d5a105-7bf4-4710-80da-45a374355659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "seen", "source": "MISP/5ba281fe-cc88-4bf3-a9ef-3c290a021402", "content": "", "creation_timestamp": "2018-09-19T17:28:51.000000Z"}, {"uuid": "bab8f1e6-7b23-4e51-b300-5a4a474ef965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "seen", "source": "MISP/fab9047e-3eb6-4d8e-a967-65c02cd3e253", "content": "", "creation_timestamp": "2020-10-09T16:07:00.000000Z"}, {"uuid": "3dfea0eb-7bde-49f2-8d39-97d414388a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "62232b8b-6b2a-4f3f-bb14-b79a533cab92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:56.000000Z"}, {"uuid": "5177f2ff-f4cd-4238-afbc-2cac2a604b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogic_deserialize_unicastref.rb", "content": "", "creation_timestamp": "2019-04-01T23:24:03.000000Z"}, {"uuid": "c39b81ea-f6ad-4989-a474-b50b6d1c87d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/1317", "content": "https://github.com/0xn0ne/weblogicScanner\n\nweblogic\nCVE-2014-4210,\nCVE-2016-0638/3510,\nCVE-2017-3248/3506/10271,\nCVE-2018-2628/2893/2894/3191/3245/3252, CVE-2019-2618/2725/2729/2890, CVE-2020-2551)", "creation_timestamp": "2024-07-18T20:18:18.000000Z"}, {"uuid": "851c1f4c-9b43-4fa5-964d-caebfa5a64b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/13943", "content": "https://github.com/0xn0ne/weblogicScanner\n\nweblogic\nCVE-2014-4210,\nCVE-2016-0638/3510,\nCVE-2017-3248/3506/10271,\nCVE-2018-2628/2893/2894/3191/3245/3252, CVE-2019-2618/2725/2729/2890, CVE-2020-2551)", "creation_timestamp": "2024-07-18T20:18:18.000000Z"}, {"uuid": "33b44784-a541-496b-8666-621dc23eef57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/301", "content": "https://github.com/sp4zcmd/WeblogicExploit-GUI\nWeblogic\u6f0f\u6d1e\u5229\u7528\u56fe\u5f62\u5316\u5de5\u5177\n\nCVE-2020-2551\nCVE-2020-2555\nCVE-2020-2883\nCVE-2016-3510\nCVE-2016-0638\nCVE-2017-10271\nJdk7u21\nCVE-2017-3248\uff08JRMP\uff09\nCVE-2018-2628\uff08JRMP\uff09\nCVE-2018-2893\uff08JRMP\uff09\nCVE-2018-3245\uff08JRMP\uff09\nCVE-2018-3181\uff08JNDI\uff09\nCVE-2020-14882\u672a\u6388\u6743\u8bbf\u95ee+CVE-2021-2109\uff08JNDI\uff09", "creation_timestamp": "2023-11-11T07:49:11.000000Z"}, {"uuid": "38dfdc97-5214-4bf2-af73-800bced3793b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2807", "content": "https://github.com/0xn0ne/weblogicScanner\n\nweblogic \u6f0f\u6d1e\u626b\u63cf\u5de5\u5177\u3002\u76ee\u524d\u5305\u542b\u5bf9\u4ee5\u4e0b\u6f0f\u6d1e\u7684\u68c0\u6d4b\u80fd\u529b\uff1a\nCVE-2014-4210,\nCVE-2016-0638/3510,\nCVE-2017-3248/3506/10271,\nCVE-2018-2628/2893/2894/3191/3245/3252, CVE-2019-2618/2725/2729/2890, CVE-2020-2551)\n\n#github #tools #exploit", "creation_timestamp": "2024-07-18T16:40:25.000000Z"}, {"uuid": "c9685699-2803-421b-929a-ba4467e90f42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1479", "content": "https://github.com/sp4zcmd/WeblogicExploit-GUI\nWeblogic\u6f0f\u6d1e\u5229\u7528\u56fe\u5f62\u5316\u5de5\u5177\n\nCVE-2020-2551\nCVE-2020-2555\nCVE-2020-2883\nCVE-2016-3510\nCVE-2016-0638\nCVE-2017-10271\nJdk7u21\nCVE-2017-3248\uff08JRMP\uff09\nCVE-2018-2628\uff08JRMP\uff09\nCVE-2018-2893\uff08JRMP\uff09\nCVE-2018-3245\uff08JRMP\uff09\nCVE-2018-3181\uff08JNDI\uff09\nCVE-2020-14882\u672a\u6388\u6743\u8bbf\u95ee+CVE-2021-2109\uff08JNDI\uff09\n\n#github #tools #exploit", "creation_timestamp": "2023-11-10T15:34:11.000000Z"}, {"uuid": "eb50ad92-6ea1-4515-b156-e58b6df3d5b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1491", "content": "#tools\n#Blue_Team_Techniques\nWeb-Logic Exploit Scanner\n(weblogic administrator console,\nCVE-2014-4210,\nCVE-2016-0638/3510,\nCVE-2017-3248/3506/10271,\nCVE-2018-2628/2893/2894/3191/3245/3252, CVE-2019-2618/2725/2729/2890, CVE-2020-2551)\nhttps://github.com/0xn0ne/weblogicScanner", "creation_timestamp": "2024-10-11T14:40:45.000000Z"}, {"uuid": "98919f18-1a62-4d8e-b63c-a3381a2be871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogic_deserialize_unicastref.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Andres Rodriguez\", \"Jacob Baines\", \"Aaron Soto\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"An unauthenticated attacker with network access to the Oracle Weblogic Server T3\\n          interface can send a serialized object (sun.rmi.server.UnicastRef)\\n          to the interface to execute code on vulnerable hosts.\", \"disclosure_date\": \"2017-01-25\", \"fullname\": \"exploit/multi/misc/weblogic_deserialize_unicastref\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:09 +0000\", \"name\": \"Oracle Weblogic Server Deserialization RCE - RMI UnicastRef\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/misc/weblogic_deserialize_unicastref.rb\", \"platform\": \"Solaris,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/misc/weblogic_deserialize_unicastref\", \"references\": [\"CVE-2017-3248\"], \"rport\": 7001, \"session_types\": false, \"targets\": [\"Unix\", \"Windows\", \"Solaris\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:27.458965Z"}, {"uuid": "7fb5de6e-4411-477f-8752-6443f3e6a8c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "seen", "source": "Telegram/r4oF1dd8S2eZHbzR9DOUSLFo4p2J6Y0ZlXzV9dEOlSgZGtc", "content": "", "creation_timestamp": "2026-09-09T04:00:36.722357Z"}, {"uuid": "3f724e47-8a15-45e8-9ddf-4012cf6b73c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-3248", "type": "published-proof-of-concept", "source": "Telegram/r4oF1dd8S2eZHbzR9DOUSLFo4p2J6Y0ZlXzV9dEOlSgZGtc", "content": "", "creation_timestamp": "2026-09-10T00:00:51.461178Z"}]}