Exploitation Summary
CVE-2019-2618 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 7 public exploits from researchers including 0xn0ne, dr0op, jas502n.
AI-analyzed exploit summary This repository contains a WebLogic vulnerability scanner that checks for multiple CVEs, including CVE-2018-2628. It is a Python-based tool designed to detect vulnerabilities in Oracle WebLogic Server by sending crafted requests and analyzing responses.
Description
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N).
Exploits (7)
This repository contains a WebLogic vulnerability scanner that checks for multiple CVEs, including CVE-2018-2628. It is a Python-based tool designed to detect vulnerabilities in Oracle WebLogic Server by sending crafted requests and analyzing responses.
This repository contains a WebLogic vulnerability scanner that checks for multiple CVEs, including CVE-2019-2618. It is a detection tool rather than an exploit, as it only verifies the presence of vulnerabilities without executing payloads for exploitation.
This repository contains a functional Python exploit for CVE-2019-2618, a WebLogic Server vulnerability allowing authenticated users to upload malicious JSP files for remote code execution. The PoC includes detailed HTTP request examples and a script to automate the exploit.
This repository contains a functional exploit for CVE-2019-2618, a deserialization vulnerability in Oracle WebLogic Server. The PoC demonstrates remote code execution (RCE) by uploading a malicious JSP file via a crafted HTTP POST request to the DeploymentService endpoint.
This exploit targets CVE-2019-2618, a deserialization vulnerability in Oracle WebLogic Server. It attempts to upload a malicious JSP shell by exploiting the deployment service endpoint with crafted multipart/form-data requests.
This repository contains a functional exploit PoC for CVE-2019-2618, a vulnerability in Oracle WebLogic Server that allows unauthenticated file upload leading to remote code execution. The script crafts a malicious multipart/form-data request to upload a JSP file to a vulnerable endpoint.
This Python script exploits CVE-2019-2618, a vulnerability in Oracle WebLogic Server, by uploading a malicious JSP file to achieve remote code execution. The exploit uses a multipart/form-data POST request to upload a shell.jsp file to a vulnerable endpoint, bypassing authentication checks.
References (1)
Scores
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N