VDB
BDU%3A2019-01748
BDU%3A2019-01748
PUBLISHED
CVSS 10 CRITICAL
Уязвимость компонентов WLS9_ASYNC и WLS-WSAT сервера приложений Oracle WebLogic Server, позволяющая нарушителю выполнить произвольный код и перехватить контроль над целевой системой
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp. | WebLogic Server |
Timeline
- May 7, 2019 CVE Published
- Mar 23, 2021 CVE Updated
References
- https://www.securitylab.ru/news/498923.php url
- https://www.zdnet.com/article/new-oracle-weblogic-zero-day-discovered-in-the-wild/ url
- https://xakep.ru/2019/04/29/weblogic-rce-patch/ url
- https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2725-5466295.html url
- https://www.exploit-db.com/exploits/46780 url
- https://www.waratek.com/new-weblogic-zero-day-rce-vulnerability/ url
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html advisory