[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fW6QRIaUUdn3uKFdzJHhcNpNxv2YhaX6y2lWEPrGOUXw":3,"g5a-family:oracle\u002Fvirtual_desktop_infrastructure":64,"g5a-ex:oracle\u002Fvirtual_desktop_infrastructure@*":65},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":36,"seoMetadata":42,"meta":61},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":17},"oracle","virtual_desktop_infrastructure",1,2,"2015-11-18",[13],{"version":14,"cve_count":9,"kev_count":15,"has_kev":16},"3.5.2",0,false,"Virtual Desktop Infrastructure by Oracle is a technology product with 1 tracked version and 2 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":14,"cve_count":9,"kev_count":15,"has_kev":16},[21,28],{"cveId":22,"description":23,"publishedDate":11,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":27},"CVE-2015-4852","The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common\u002Fmodules\u002Fcom.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.",9.8,"v3.1","Critical",0.94991,{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":16,"epssScore":35},"CVE-2015-7940","The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an \"invalid curve attack.\"","2015-11-09",5,"v2","Medium",0.0482,[37],{"cveId":22,"description":23,"publishedDate":11,"cvssScore":24,"severity":26,"isKev":4,"epssScore":27,"cisaVulnName":38,"cisaDateAdded":39,"cisaShortDescription":40,"cisaRequiredAction":41},"Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability","2021-11-03","Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution.","Apply updates per vendor instructions.",{"title":43,"metaDescription":44,"keywords":45,"structuredData":46},"Virtual Desktop Infrastructure by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Virtual Desktop Infrastructure by Oracle covering 1 version with 2 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Virtual Desktop Infrastructure vulnerabilities, Virtual Desktop Infrastructure security, Virtual Desktop Infrastructure CVE, Oracle Virtual Desktop Infrastructure, Virtual Desktop Infrastructure threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Virtual Desktop Infrastructure KEV, Virtual Desktop Infrastructure exploited vulnerabilities",{"@context":47,"@type":48,"name":49,"description":44,"url":50,"manufacturer":51,"applicationCategory":55,"softwareVersion":56,"mainEntity":57},"https:\u002F\u002Fschema.org","SoftwareApplication","Virtual Desktop Infrastructure","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fvirtual_desktop_infrastructure",{"@type":52,"name":53,"url":54},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","1 versions tracked",{"@type":58,"name":59,"description":60,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Virtual Desktop Infrastructure Security Vulnerabilities","Security vulnerabilities affecting Virtual Desktop Infrastructure by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":62,"apiVersion":63},"2026-10-17T18:13:40.308Z","3.0",[],{"rows":66,"total":9,"capped":16,"failed":15},[67],{"cveId":22,"name":38,"severity":26,"cvss":24,"added":39,"epss":27,"published":68,"ranges":69,"checked":4,"hits":71,"covers":16},"2015-11-18T15:59:00.133",[70],"up to 3.5.2",[]]