VDB
BDU%3A2019-02355
BDU%3A2019-02355
PUBLISHED
CVSS 10 CRITICAL
Уязвимость компонента XMLDecoder сервера приложений Oracle WebLogic Server, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp. | WebLogic Server, Communications Diameter Signaling Router, StorageTek Tape Analytics SW Tool | |
| Oracle Corporation | WebLogic Server | 10.3.6.0.0, 12.2.1.3.0, 12.1.3.0.0 |
Timeline
- Jun 19, 2019 PoC Published
- Jul 4, 2019 CVE Published
- Mar 23, 2021 CVE Updated
References
- https://www.oracle.com/security-alerts/cpuapr2020.html url
- https://exploit.kitploit.com/2019/06/oracle-weblogic-server-deserialization.html url
- https://www.tenable.com/blog/cve-2019-2729-oracle-releases-out-of-band-patch-for-weblogic-server-deserialization url
- https://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2729-5570780.html url
- https://nvd.nist.gov/vuln/detail/CVE-2019-2729 url
- https://www.oracle.com/security-alerts/cpujan2020.html advisory
- https://www.oracle.com/security-alerts/cpujul2020.html url
- http://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2729-5570780.html url
- http://packetstormsecurity.com/files/155886/Oracle-Weblogic-10.3.6.0.0-Remote-Command-Execution.html url
- https://www.oracle.com/security-alerts/cpujul2021.html url
- http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html url