Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-2729
HistoryJun 19, 2019 - 11:15 p.m.

CVE-2019-2729

2019-06-1923:15:10
CWE-284
[email protected]
web.nvd.nist.gov
7

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.967

Percentile

99.7%

JSON

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected configurations

Nvd
Node
oraclecommunications_diameter_signaling_routerMatch8.0
OR
oraclecommunications_diameter_signaling_routerMatch8.1
OR
oraclecommunications_diameter_signaling_routerMatch8.2
OR
oraclecommunications_diameter_signaling_routerMatch8.2.1
OR
oraclecommunications_network_integrityRange7.3.2–7.3.6
OR
oraclehyperion_infrastructure_technologyMatch11.1.2.4
OR
oraclehyperion_infrastructure_technologyMatch11.2.5.0
OR
oracleidentity_managerMatch11.1.2.3.0
OR
oracleidentity_managerMatch12.2.1.3.0
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.56
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.57
OR
oraclepeoplesoft_enterprise_peopletoolsMatch8.58
OR
oraclerapid_planningMatch12.1
OR
oraclerapid_planningMatch12.2
OR
oraclestoragetek_tape_analytics_sw_toolMatch2.3
OR
oracletape_library_acslsMatch8.5
OR
oracleweblogic_serverMatch10.3.6.0.0
OR
oracleweblogic_serverMatch12.1.3.0.0
OR
oracleweblogic_serverMatch12.2.1.3.0
VendorProductVersionCPE
oraclecommunications_diameter_signaling_router8.0cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0:*:*:*:*:*:*:*
oraclecommunications_diameter_signaling_router8.1cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:*
oraclecommunications_diameter_signaling_router8.2cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:*
oraclecommunications_diameter_signaling_router8.2.1cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1:*:*:*:*:*:*:*
oraclecommunications_network_integrity*cpe:2.3:a:oracle:communications_network_integrity:*:*:*:*:*:*:*:*
oraclehyperion_infrastructure_technology11.1.2.4cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*
oraclehyperion_infrastructure_technology11.2.5.0cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.2.5.0:*:*:*:*:*:*:*
oracleidentity_manager11.1.2.3.0cpe:2.3:a:oracle:identity_manager:11.1.2.3.0:*:*:*:*:*:*:*
oracleidentity_manager12.2.1.3.0cpe:2.3:a:oracle:identity_manager:12.2.1.3.0:*:*:*:*:*:*:*
oraclepeoplesoft_enterprise_peopletools8.56cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*
Rows per page:
1-10 of 191

Related

trendmicroblog 2
attackerkb 1
packetstorm 1
exploitpack 1
nessus 4
zdt 1
githubexploit 6
prion 1
exploitdb 1
checkpoint_advisories 1
cve 1
dsquare 1
cisa 1
cvelist 1
nuclei 1
symantec 1
thn 2
threatpost 4
securelist 1
kitploit 1
oracle 5
trendmicroblog
trendmicroblog
This Week in Security News: Cyberespionage Campaigns and Botnet Malware
2019-06-21 19:16:21
This Week in Security News: Malvertising and Internet of Things Malware
2019-06-28 14:24:11
attackerkb
attackerkb
CVE-2019-2729
2019-06-19 00:00:00
packetstorm
packetstorm
Oracle Weblogic 10.3.6.0.0 Remote Command Execution
2020-01-09 00:00:00
exploitpack
exploitpack
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution
2020-01-09 00:00:00
nessus
nessus
Oracle WebLogic Server Deserialization RCE (CVE-2019-2729)
2019-06-27 00:00:00
Oracle WebLogic Server Web Services Remote Code Execution Vulnerability
2019-06-19 00:00:00
Oracle WebLogic Multiple Java Object Deserialization RCE
2018-05-03 00:00:00
zdt
zdt
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution Exploit
2020-01-09 00:00:00
githubexploit
githubexploit
Exploit for Improper Access Control in Oracle Weblogic Server
2020-02-19 03:49:51
Exploit for Improper Access Control in Oracle Weblogic Server
2020-01-09 22:27:36
Exploit for Injection in Oracle Weblogic Server
2019-06-24 08:33:07
prion
prion
Design/Logic Flaw
2019-06-19 23:15:00
exploitdb
exploitdb
Oracle Weblogic 10.3.6.0.0 - Remote Command Execution
2020-01-09 00:00:00
checkpoint_advisories
checkpoint_advisories
Oracle Weblogic Insecure Deserialization (CVE-2019-2729)
2019-06-25 00:00:00
cve
cve
CVE-2019-2729
2019-06-19 23:15:10
dsquare
dsquare
Oracle WebLogic Server Web Services RCE
2020-01-08 00:00:00
cisa
cisa
Oracle Releases Security Advisory for WebLogic
2019-06-19 00:00:00
cvelist
cvelist
CVE-2019-2729
2019-06-19 22:24:10
nuclei
nuclei
Oracle WebLogic Server Administration Console - Remote Code Execution
2021-10-21 00:07:30
symantec
symantec
Oracle WebLogic Server Deserialization CVE-2019-2729 Remote Code Execution Vulnerability
2019-06-18 00:00:00
thn
thn
New Critical Oracle WebLogic Flaw Under Active Attack — Patch Now
2019-06-19 18:42:00
Oracle Warns of Critical Remotely Exploitable Weblogic Server Flaws
2021-07-22 08:21:00
threatpost
threatpost
Oracle Warns of New Actively-Exploited WebLogic Flaw
2019-06-19 16:25:30
Oracle: Unpatched Versions of WebLogic App Server Under Active Attack
2020-05-04 14:57:51
Oracle WebLogic Server RCE Flaw Under Active Attack
2020-10-29 14:49:58
securelist
securelist
IT threat evolution Q3 2019
2019-11-29 10:00:12
kitploit
kitploit
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 11:30:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.967

Percentile

99.7%

JSON
Related for NVD:CVE-2019-2729
trendmicroblog2attackerkb1packetstorm1exploitpack1nessus4zdt1githubexploit6prion1exploitdb1checkpoint_advisories1cve1dsquare1cisa1cvelist1nuclei1symantec1thn2threatpost4securelist1kitploit1oracle5