CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-04-26
Oracle WebLogic Server XML Deserialization Remote Code Execution (RCE) Vulnerability (CVE-2019-2725) Security Advisory
[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0 and 12.1.3.0.0
[Impact] Unauthenticated remote attackers can gain full control of the WebLogic Server and execute arbitrary system commands via malicious HTTP requests
[Mitigation] Apply the official Oracle security patches immediately, or disable/remove the unused wls9-async and wls-wsat components