CVE-2019-2888

MEDIUM

Oracle WebLogic Server <12.2.1.3 - Confidentiality Impaired

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-2888. PoCs published by jas502n.

AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2019-2888, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages a malicious serialized object to achieve remote code execution (RCE) by manipulating the EJBTaglibDescriptor class.

Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: EJB Container). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Exploits (1)

nomisec WORKING POC 59 stars

by jas502n · poc

https://github.com/jas502n/CVE-2019-2888

View Code ZIP pw:eip

This repository contains a proof-of-concept exploit for CVE-2019-2888, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages a malicious serialized object to achieve remote code execution (RCE) by manipulating the EJBTaglibDescriptor class.

Classification

Working Poc 90%

Attack Type

Deserialization

Complexity

Moderate

Reliability

Reliable

Target: Oracle WebLogic Server

No auth needed

Prerequisites: Network access to vulnerable WebLogic Server · Ability to send crafted serialized objects

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Scores

CVSS v3 5.3

EPSS 0.7283

EPSS Percentile 98.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

Status published

Products (3)

oracle/weblogic_server 10.3.6.0.0

oracle/weblogic_server 12.1.3.0.0

oracle/weblogic_server 12.2.1.3.0

Published Oct 16, 2019

Tracked Since Feb 18, 2026