CVE-2019-2890
HIGHOracle WebLogic Server 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 - Authenticated Remote Code Execution via T3
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2019-2890. PoCs published by l1nk3rlin, jas502n, zhzhdoai.
AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2019-2890, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages JRMP to achieve remote code execution by generating a malicious serialized file and sending it to the target server.
Description
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Exploits (7)
This repository contains a proof-of-concept exploit for CVE-2019-2890, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages JRMP to achieve remote code execution by generating a malicious serialized file and sending it to the target server.
This repository contains a functional proof-of-concept exploit for CVE-2019-2890, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages JRMP to achieve remote code execution by crafting a malicious serialized object and sending it to the target server.
This repository contains proof-of-concept exploits for multiple WebLogic vulnerabilities, including CVE-2015-4852, which leverages Java deserialization via Apache Commons Collections to achieve remote code execution. The PoC generates a serialized payload that, when deserialized, executes arbitrary commands.
This is a Python-based exploit for CVE-2019-2890, targeting a deserialization vulnerability in Oracle WebLogic Server. It sends a crafted T3 protocol request with a malicious payload to achieve remote code execution.
This repository contains a proof-of-concept exploit for CVE-2019-2890, a deserialization vulnerability in Oracle WebLogic Server. The exploit leverages JRMP to achieve remote code execution by generating a malicious serialized file and sending it to the target server.
This is a Python-based exploit for CVE-2019-2890, targeting a deserialization vulnerability in Oracle WebLogic Server. It sends a crafted T3 protocol request with a malicious payload to achieve remote code execution.
This PoC exploits CVE-2019-2890, a Java deserialization vulnerability in Oracle WebLogic Server, by sending a malicious payload via T3 protocol to achieve remote code execution. It uses ysoserial to generate the payload and requires a target IP and command to execute.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H