CVE-2017-10147: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Core Compo...

Security readout for executives and security teams

CVE-2017-10147 is an Oracle WebLogic Server flaw that can let an unauthenticated network attacker crash or hang the server through T3 access. The main business risk is outage, not data theft, but outages in WebLogic-backed applications can disrupt critical operations. Exposure is most likely where affected WebLogic versions are reachable over T3 from untrusted networks, partners, or broad internal segments. Internet-facing administrative or application endpoints increase urgency. Systems not using affected versions or without reachable T3 exposure are less likely exposed. Treat this as a high-priority availability risk for business-critical WebLogic services. Patch and reduce T3 exposure promptly, especially on externally reachable systems. The bundle does not show confirmed active exploitation, but unauthenticated network-triggered denial of service creates credible outage risk. Mitigation focus: Apply Oracle July 2017 CPU fixes or later supported WebLogic security updates.; Restrict T3 access to trusted administrative and cluster communication paths only.; Remove affected WebLogic versions from internet-reachable networks where possible..

Prepared

Jun 12, 2026, 21:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.