Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

vul_app: oracle_weblogic_bypass_java_deserialization_remote_code_exec（Rule ID：1070210094）

Release Date：2025/9/15

Rule Name：CVE-2016-0638: Oracle WebLogic Bypass Java Deserialization Remote Code Execution Vulnerability

Severity：critical

CVE ID：CVE-2016-0638

Descripiton：

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.5, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentially, integrity, and availability via vectors related to Java Messaging Service. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

Solution：

Update vendor patches.