CoreCVE
Back

CRITICAL

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)

Published Apr 23, 2019

Description

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner oracle
Published Apr 23, 2019
Updated Oct 2, 2024
Reserved Dec 14, 2018
Link CVE-2019-2645

CISA Vulnrichment

Updated Oct 2, 2024

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2019-2645

Red Hat

No data

ENISA EUVD

Assigner oracle
Published Apr 23, 2019
Updated Oct 2, 2024
Link EUVD-2019-12285

GitHub

No data