CVE-2019-2729
100Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actcvss 9.8epss 89%
de la publicación al arma204 días
Publicada en NVD19 jun
1ª PoC+204d
VulnCheck1 may
probabilidad de explotación
89%top 1% de las CVE
explotación observada
síVulnCheck
10 exploit(s) público(s)
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Oracle Corporation · WebLogic ServerPoCs públicas encontradas — 10
exploitdbwww.exploit-db.com/exploits/47895no verificadogithubgithub.com/ruthlezs/CVE-2019-2729-Exploit★ 45githubgithub.com/waffl3ss/CVE-2019-2729★ 7githubgithub.com/Luchoane/CVE-2019-2729_creal★ 3githubgithub.com/pizza-power/weblogic-CVE-2019-2729-POC★ 3vulncheckvulncheck.com/xdb/7840458c2a60no verificadocve_referencepacketstormsecurity.com/files/155886/Oracle-Weblogic-10.3.6.0.0-Remote-Command-Execution.htmlno verificadovulncheckvulncheck.com/xdb/db3e9c03cb04no verificadovulncheckvulncheck.com/xdb/3528002fae61no verificadovulncheckvulncheck.com/xdb/164746dd6f6bno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://packetstormsecurity.com/files/155886/Oracle-Weblogic-10.3.6.0.0-Remote-Command-Execution.htmlhttps://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpujan2020.htmlhttps://www.oracle.com/security-alerts/cpujul2020.htmlhttps://www.oracle.com/security-alerts/cpujul2021.htmlhttp://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2729-5570780.htmlhttp://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html