VulnerabilitycriticalExploited in the wild

Another Oracle WebLogic Server RCE under active exploitation

Help Net Securityby @zeljkazorzJun 19, 2019 · 00:00 UTC (Jun 19, 2019)1 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2019-2729 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-2729 CVE-2019-2725

Tags: cve-2019-2729 cve-2019-2725 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-2725	Unauthenticated Injection in Oracle WebLogic Web Services Enables RCE	9.8	100%	KEVRansomwarePoC	Apr 26, 2019 KEV Jan 10, 2022
CVE-2019-2729	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent	9.8	89%	PoC	Jun 19, 2019

From the original article

1 min read at helpnetsecurity.com

Oracle has released an out-of-band fix for CVE-2019-2729, a critical deserialization vulnerability in a number of versions of Oracle WebLogic Server, and is urging customers to apply the security update as soon as possible. Speed is of the essence as, according to KnownSec 404 researchers, the vulnerability is already being exploited in the wild.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.