VulnerabilitycriticalExploited in the wild

New Critical Oracle WebLogic Flaw Under Active Attack — Patch Now

The Hacker Newsby @TheHackersNewsJun 19, 2019 · 19:12 UTC (Jun 19, 2019)2 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2019-2729 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-2729 CVE-2019-2725

Tags: cve-2019-2729 cve-2019-2725 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-2725	Unauthenticated Injection in Oracle WebLogic Web Services Enables RCE	9.8	100%	KEVRansomwarePoC	Apr 26, 2019 KEV Jan 10, 2022
CVE-2019-2729	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent	9.8	89%	PoC	Jun 19, 2019

From the original article

2 min read at thehackernews.com

Oracle has released an out-of-band emergency software update to patch a newly discovered critical vulnerability in the WebLogic Server. According to Oracle, the vulnerability—which can be identified as CVE-2019-2729 and has a CVSS score of 9. 8 out of 10—is already being exploited in the wild by an unnamed group of attackers.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.