CVE-2019-2729
100Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 9.8epss 89%
da publicação à arma204 dias
Publicada no NVD19 de jun.
1ª PoC+204d
VulnCheck1 de mai.
probabilidade de exploração
89%top 1% das CVEs
exploração observada
simVulnCheck
10 exploit(s) público(s)
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Oracle Corporation · WebLogic ServerPoCs públicas encontradas — 10
exploitdbwww.exploit-db.com/exploits/47895não verificadogithubgithub.com/ruthlezs/CVE-2019-2729-Exploit★ 45githubgithub.com/waffl3ss/CVE-2019-2729★ 7githubgithub.com/pizza-power/weblogic-CVE-2019-2729-POC★ 3githubgithub.com/Luchoane/CVE-2019-2729_creal★ 3vulncheckvulncheck.com/xdb/7840458c2a60não verificadovulncheckvulncheck.com/xdb/3528002fae61não verificadovulncheckvulncheck.com/xdb/db3e9c03cb04não verificadovulncheckvulncheck.com/xdb/164746dd6f6bnão verificadocve_referencepacketstormsecurity.com/files/155886/Oracle-Weblogic-10.3.6.0.0-Remote-Command-Execution.htmlnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/155886/Oracle-Weblogic-10.3.6.0.0-Remote-Command-Execution.htmlhttps://www.oracle.com/security-alerts/cpuapr2020.htmlhttps://www.oracle.com/security-alerts/cpujan2020.htmlhttps://www.oracle.com/security-alerts/cpujul2020.htmlhttps://www.oracle.com/security-alerts/cpujul2021.htmlhttp://www.oracle.com/technetwork/security-advisory/alert-cve-2019-2729-5570780.htmlhttp://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html