vulnerability
Oracle WebLogic: CVE-2019-2729 : Deserialization vulnerability in Oracle WebLogic Server
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:P/I:P/A:P) | 06/18/2019 | 06/19/2019 | 08/28/2019 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
06/18/2019
Added
06/19/2019
Modified
08/28/2019
Description
This Security Alert addresses CVE-2019-2729, a deserialization vulnerability via XMLDecoder in Oracle WebLogic Server Web Services. This remote code execution vulnerability is remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password.
Solution(s)
oracle-weblogic-10_3_6_0_0-apply-patch-29800002oracle-weblogic-10_3_6_0_0-apply-patch-29800003oracle-weblogic-12_1_3_0_0-apply-patch-29792735oracle-weblogic-12_1_3_0_0-apply-patch-29792736oracle-weblogic-12_2_1_3_0-apply-patch-29921455oracle-weblogic-jul-2019-cpu-10_3_6_0_0oracle-weblogic-jul-2019-cpu-12_1_3_0_0oracle-weblogic-jul-2019-cpu-12_2_1_3_0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.