Exploit / PoCcriticalExploited in the wild

Another Remote Code Execution Flaw in WebLogic exploited in the wild

Security Affairsby @securityaffairsJun 19, 2019 · 11:03 UTC (Jun 19, 2019)2 min read2

Read at securityaffairs.com

Analyze CVE-2019-2729 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-2729 CVE-2019-2725

Tags: cve-2019-2729 cve-2019-2725 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-2725	Unauthenticated Injection in Oracle WebLogic Web Services Enables RCE	9.8	100%	KEVRansomwarePoC	Apr 26, 2019 KEV Jan 10, 2022
CVE-2019-2729	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent	9.8	89%	PoC	Jun 19, 2019

From the original article

2 min read at securityaffairs.com

Oracle released emergency patches for another critical remote code execution vulnerability affecting WebLogic Server. On Tuesday, Oracle released emergency patches for another critical remote code execution vulnerability affecting the WebLogic Server. The vulnerability, tracked as CVE-2019-2729 , affects WebLogic versions 10.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.