Ransomwarecritical

Attackers actively exploiting Atlassian Confluence and Oracle WebLogic flaws

Help Net Securityby @zeljkazorzMay 2, 2019 · 00:00 UTC (May 2, 2019)3 min read1

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2019-2725 CVE-2019-3396

Tags: cve-2019-2725 cve-2019-3396 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-2725	Unauthenticated Injection in Oracle WebLogic Web Services Enables RCE	9.8	100%	KEVRansomwarePoC	Apr 26, 2019 KEV Jan 10, 2022
CVE-2019-3396	Server-Side Template Injection RCE in Atlassian Confluence Server and Data Center	9.8	100%	KEVRansomwarePoC ×4	Mar 25, 2019 KEV Nov 3, 2021

From the original article

3 min read at helpnetsecurity.com

Attackers are actively exploiting recently fixed vulnerabilities in Oracle WebLogic and the Widget Connector macro in Atlassian Confluence to deliver ransomware, mine cryptocurrency and make the compromised machines participate in DDoS attacks. CVE-2019-2725 is a deserialization remote command execution vulnerability that affects all Oracle WebLogic versions that have two specific components enabled.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.