CVE:CVE-2018-3246
CNNVD:CNNVD-201810-849
Oracle Fusion Middleware（Oracle融合中间件）是美国甲骨文（Oracle）公司的一套面向企业和云环境的业务创新平台。该平台提供了中间件、软件集合等功能。WebLogic Server是其中的一个适用于云环境和传统环境的应用服务器组件。
Oracle Fusion Middleware中的WebLogic Server组件12.1.3.0版本和12.2.1.3版本的WLS - Web Services子组件存在安全漏洞。攻击者可利用该漏洞未授权访问数据，影响数据的保密性。
solution:Upgrade oracle banking_platform to a higher version than 2.6.0,2.6.1,2.6.2,and avoid the version 2.6.0,2.6.1,2.6.2; Upgrade oracle business_process_management_suite to a higher version than 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0,and avoid the version 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0; Upgrade oracle communications_converged_application_server to a higher version than 7.0.0.1,and avoid the version (,7.0.0.1); Upgrade oracle communications_webrtc_session_controller to a higher version than 7.2,and avoid the version (,7.2); Upgrade oracle enterprise_repository to a higher version than 12.1.3.0.0,and avoid the version 12.1.3.0.0; Upgrade oracle retail_convenience_and_fuel_pos_software to a higher version than 2.8.1,and avoid the version 2.8.1; Upgrade oracle utilities_network_management_system to a higher version than 1.12.0.3,2.3.0.0,2.3.0.1,2.3.0.2,and avoid the version 1.12.0.3,2.3.0.0,2.3.0.1,2.3.0.2; Upgrade oracle webcenter_portal to a higher version than 11.1.1.9.0,12.2.1.3.0,and avoid the version 11.1.1.9.0,12.2.1.3.0; Upgrade oracle weblogic_server to a higher version than 12.1.3.0.0,12.2.1.3,12.2.1.3.0,and avoid the version 12.1.3.0.0,12.2.1.3,12.2.1.3.0