---
title: "Security digest: April 18, 2017"
url: https://erroneo.us/security/2017-04-18/
description: "April 18, 2017 vulnerability digest: 1 brief (Oracle WebLogic CVE-2017-3506: 2017 WLS-WSAT Bug…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2017-04-18
date_modified: 2026-10-23
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: April 18, 2017

1 editorial brief.

## Take stock

- Check exposure: Oracle WebLogic CVE-2017-3506: 2017 WLS-WSAT Bug in KEV . Anyone running Oracle WebLogic Server 10.3.6.0, 12.1.3.0 or 12.2.1.0 to 12.2.1.2, alone or inside another product, especially with the server's HTTP port reachable from the internet.
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [Oracle WebLogic CVE-2017-3506: 2017 WLS-WSAT Bug in KEV](https://erroneo.us/security/briefs/oracle-weblogic-wls-wsat-cve-2017-3506-kev/index.md): Patched WebLogic is fine; any server still on a 2017-era release with /wls-wsat/ reachable is a cryptominer target and should be upgraded and checked for compromise.

## Known exploited (CISA KEV)

None.

## Critical advisories

None.

---
Source page: https://erroneo.us/security/2017-04-18/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt