Vulnerabilitycritical

Oracle Warns of Critical Remotely Exploitable Weblogic Server Flaws

The Hacker Newsby @TheHackersNewsJul 22, 2021 · 08:21 UTC (Jul 22, 2021)1 min read1 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-2729 CVE-2021-2394 CVE-2021-2397 CVE-2021-2382 CVE-2021-2378 CVE-2021-2376 CVE-2021-2403 CVE-2021-2135 CVE-2021-2136

Tags: cve-2019-2729 cve-2021-2394 cve-2021-2397 cve-2021-2382 cve-2021-2378 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-2729	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent	9.8	89%	PoC	Jun 19, 2019
CVE-2021-2135 +1 related CVE CVE-2021-2136	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component	9.8	8%		Apr 22, 2021
CVE-2021-2394 +5 related CVEs CVE-2021-2382 CVE-2021-2397 CVE-2021-2378 CVE-2021-2376 CVE-2021-2403	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component	9.8 group max	77%		Jul 21, 2021

From the original article

1 min read at thehackernews.com

Oracle on Tuesday released its quarterly Critical Patch Update for July 2021 with 342 fixes spanning across multiple products, some of which could be exploited by a remote attacker to take control of an affected system. Chief among them is CVE-2019-2729 , a critical deserialization vulnerability via XMLDecoder in Oracle WebLogic Server Web Services that's remotely exploitable without authentication.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.