Enivs0Rt

**Name of the Vulnerable Software and Affected Versions** Oracle WebLogic Server versions 12.2.1.4.0 through 14.1.1.0.0 **Description** The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing a remote attacker to gain unauthorized access to protected information via T3/IIOP protocols. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. **Recommendations** For versions 12.2.1.4.0 and 14.1.1.0.0, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jeewms versions 3.7 and earlier **Description** The issue allows a remote attacker to escalate privileges via the AuthInterceptor component. **Recommendations** For Jeewms versions 3.7 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Jeewms versions 3.7 and earlier **Description** A Directory Traversal issue allows a remote attacker to obtain sensitive information via the `cgformTemplateController` component. **Recommendations** For Jeewms versions 3.7 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.