CVE-2019-2618
MEDIUM EXPLOITEDOracle WebLogic Server <12.2.1.3 - RCE
Title source: llmDescription
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data as well as unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N).
Exploits (7)
Scores
CVSS v3
5.5
EPSS
0.8725
EPSS Percentile
99.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
Exploitation Intel
VulnCheck KEV
2024-05-22
Classification
Status
published
Affected Products (3)
oracle/weblogic_server
oracle/weblogic_server
oracle/weblogic_server
Timeline
Published
Apr 23, 2019
Tracked Since
Feb 18, 2026