Vulnerabilities/Oracle/CVE-2017-10271
CVE-2017-10271: Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
CISA KEV entry · Last checked 30 Oct 2026, 12:10 UTC
Exploitation confirmedRansomware use knownFix: Unknown
CVSS 3.1 · NVD7.5High
EPSS100.0%100th percentile · 29 Oct 2026
CISA KEVListedAdded 10 Feb 2022
Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution.
Recommended action
Apply updates per vendor instructions.
CISA due date 10 Aug 2022
Am I affected?
| Product | Affected versions | Fixed in |
|---|---|---|
| WebLogic Server | 10.3.6.0.0 | Unknown |
| WebLogic Server | 12.1.3.0.0 | Unknown |
| WebLogic Server | 12.2.1.1.0 | Unknown |
| WebLogic Server | 12.2.1.2.0 | Unknown |
No source states a fixed version. Check the vendor advisory below.
Before you patch
Restart
See vendor guidance.Known issues
Check release notes.Verification
Confirm installed version.Timeline
- 10 Feb 2022 · Added to CISA KEV
- 10 Aug 2022 · CISA due date
Sources checked
| CISA KEV | 30 Oct 2026, 12:10 UTC |
| CVE List v5 | 30 Oct 2026, 12:10 UTC |
| NVD | 30 Oct 2026, 12:10 UTC |
| FIRST EPSS | 30 Oct 2026, 12:11 UTC |
Data from CISA, MITRE, NVD and FIRST. Sources and licences.