Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2019-2729
HistoryJun 19, 2019 - 11:15 p.m.

CVE-2019-2729

2019-06-1923:15:10
CWE-284
[email protected]
web.nvd.nist.gov
435
In Wild
11
cve-2019-2729
oracle
weblogic server
fusion middleware
vulnerability
http
network access
cvss 3.0
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.969 High

EPSS

Percentile

99.7%

JSON

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected configurations

Vulners
NVD
Node
oracleweblogic_serverRange≤10.3.6.0.0
OR
oracleweblogic_serverRange≤12.1.3.0.0
OR
oracleweblogic_serverRange≤12.2.1.3.0
VendorProductVersionCPE
oracleweblogic_server*cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*
oracleweblogic_server*cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*
oracleweblogic_server*cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "WebLogic Server",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "10.3.6.0.0"
      },
      {
        "status": "affected",
        "version": "12.1.3.0.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.3.0"
      }
    ]
  }
]

Social References

More

Related

zdt 1
prion 1
nessus 4
githubexploit 4
trendmicroblog 2
attackerkb 1
checkpoint_advisories 1
exploitpack 1
packetstorm 1
nuclei 1
dsquare 1
cvelist 1
nvd 1
cisa 1
exploitdb 1
symantec 1
thn 2
threatpost 4
securelist 1
kitploit 1
oracle 5
zdt
zdt
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Exploit
2020-01-09 00:00:00
prion
prion
Design/Logic Flaw
2019-06-19 23:15:00
nessus
nessus
Oracle WebLogic Server Deserialization RCE (CVE-2019-2729)
2019-06-27 00:00:00
Oracle WebLogic Server Web Services Remote Code Execution Vulnerability
2019-06-19 00:00:00
Oracle WebLogic Multiple Java Object Deserialization RCE
2018-05-03 00:00:00
githubexploit
githubexploit
Exploit for Improper Access Control in Oracle Weblogic Server
2020-02-19 03:49:51
Exploit for Improper Access Control in Oracle Weblogic Server
2020-01-09 22:27:36
Exploit for Injection in Oracle Weblogic Server
2019-06-24 08:33:07
trendmicroblog
trendmicroblog
This Week in Security News: Cyberespionage Campaigns and Botnet Malware
2019-06-21 19:16:21
This Week in Security News: Malvertising and Internet of Things Malware
2019-06-28 14:24:11
attackerkb
attackerkb
CVE-2019-2729
2019-06-19 00:00:00
checkpoint_advisories
checkpoint_advisories
Oracle Weblogic Insecure Deserialization (CVE-2019-2729)
2019-06-25 00:00:00
exploitpack
exploitpack
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution
2020-01-09 00:00:00
packetstorm
packetstorm
Oracle Weblogic 10.3.6.0.0 Remote Command Execution
2020-01-09 00:00:00
nuclei
nuclei
Oracle WebLogic Server Administration Console - Remote Code Execution
2021-10-21 00:07:30
dsquare
dsquare
Oracle WebLogic Server Web Services RCE
2020-01-08 00:00:00
cvelist
cvelist
CVE-2019-2729
2019-06-19 22:24:10
nvd
nvd
CVE-2019-2729
2019-06-19 23:15:10
cisa
cisa
Oracle Releases Security Advisory for WebLogic
2019-06-19 00:00:00
exploitdb
exploitdb
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution
2020-01-09 00:00:00
symantec
symantec
Oracle WebLogic Server Deserialization CVE-2019-2729 Remote Code Execution Vulnerability
2019-06-18 00:00:00
thn
thn
New Critical Oracle WebLogic Flaw Under Active Attack — Patch Now
2019-06-19 18:42:00
Oracle Warns of Critical Remotely Exploitable Weblogic Server Flaws
2021-07-22 08:21:00
threatpost
threatpost
Oracle Warns of New Actively-Exploited WebLogic Flaw
2019-06-19 16:25:30
Oracle: Unpatched Versions of WebLogic App Server Under Active Attack
2020-05-04 14:57:51
Oracle WebLogic Server RCE Flaw Under Active Attack
2020-10-29 14:49:58
securelist
securelist
IT threat evolution Q3 2019
2019-11-29 10:00:12
kitploit
kitploit
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 11:30:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.969 High

EPSS

Percentile

99.7%

JSON
Related for CVE-2019-2729
zdt1prion1nessus4githubexploit4trendmicroblog2attackerkb1checkpoint_advisories1exploitpack1packetstorm1nuclei1dsquare1cvelist1nvd1cisa1exploitdb1symantec1thn2threatpost4securelist1kitploit1oracle5