CVE-2019-2618

🗓️ 23 Apr 2019 18:16:41Reported by oracleType

Vulnerability in Oracle WebLogic Server allows high privileged network attacker to compromise server and gain unauthorized access to critical data, with potential for unauthorized update, insert or delete access

Reporter	Title	Published	Views	Family All 17
Gitee	Exploit for Code Injection in Pivotal_Software Spring_Data_Commons	11 Apr 202111:34	–	gitee
GithubExploit	Exploit for CVE-2019-2618	6 May 201910:33	–	githubexploit
BDU FSTEC	The vulnerability of the WLS Core Components of Oracle WebLogic Server application servers allows attackers to modify, add, or delete data.	25 Apr 201900:00	–	bdu_fstec
Circl	CVE-2019-2618	18 Jul 202416:40	–	circl
CNVD	Oracle WebLogic Server Component Access Control Error Vulnerability (CNVD-2019-27109)	17 Apr 201900:00	–	cnvd
Check Point Advisories	Oracle Fusion Middleware Remote Code Execution (CVE-2019-2618)	5 May 201900:00	–	checkpoint_advisories
CVE	CVE-2019-2618	23 Apr 201918:16	–	cve
myhack58	Oracle WebLogic Server high-risk security vulnerability alerts-a vulnerability alert-the black bar safety net	18 Apr 201900:00	–	myhack58
myhack58	The WebLogic vulnerability and patch analysis-vulnerability warning-the black bar safety net	23 Sep 201900:00	–	myhack58
NVD	CVE-2019-2618	23 Apr 201919:32	–	nvd

[
  {
    "product": "WebLogic Server",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "10.3.6.0.0"
      },
      {
        "status": "affected",
        "version": "12.1.3.0.0"
      },
      {
        "status": "affected",
        "version": "12.2.1.3.0"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

23 Apr 2019 18:16Current

6Medium risk

Vulners AI Score6

EPSS0.89519