Oracle WebLogic Remote Code Execution Vulnerability

Last Update Date: 20 Jun 2019 Release Date: 19 Jun 2019 6173 Views

RISK: Extremely High Risk

Extremely High Risk

TYPE: Servers - Other Servers

TYPE: Other Servers

A vulnerability has been identified in Oracle WebLogic server, a remote user can exploit this vulnerability to trigger Remote Code Execution on the targeted system.

 

[Updated 20-Jun-2019]: We noticed the vulnerability is being exploited in the wild. As such, the criticality level is changed from moderately critical to extremely critical.

Impact

  • Remote Code Execution

System / Technologies affected

  • Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • The vendor has issued a fix.

https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2729-5570780.html

Vulnerability Identifier

Source

Related Link

Share with

Previous

Mozilla Firefox Remote Code Execution Vulnerability

19 Jun 2019 4247 Views

Next

ISC BIND Denial of Service Vulnerability

21 Jun 2019 4232 Views

We use cookies to give you the best possible experience on our website. By continuing to browse this site, you give consent for cookies to be used. For more details please read our Cookie Policy.

PRIVACY POLICY