CVE-2019-2890

Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Affected products

Vendor	Product	Affected	Fixed
Oracle	WebLogic Server	10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0	—

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 7 repositories

l1nk3rlin/CVE-2019-2890 ★ 85 · Dec 6, 2019
jas502n/CVE-2019-2890 ★ 44 · Dec 8, 2019

CVE-2019-2890 WebLogic 反序列化RCE漏洞
zhzhdoai/Weblogic_Vuln ★ 17 · Aug 10, 2020

CVE-2015-4852、CVE-2016-0638、CVE-2016-3510、CVE-2019-2890漏洞POC
ZO1RO/CVE-2019-2890 ★ 11 · Oct 17, 2019

CVE-2019-2890 Exploit for WebLogic with T3
ianxtianxt/CVE-2019-2890 ★ 4 · Dec 14, 2019

0-sec.org
Ky0-HVA/CVE-2019-2890 ★ 1 · Oct 29, 2019

Clone code from https://github.com/v-gift/CVE-2019-2890
freeide/weblogic_cve-2019-2890 ★ 0 · Oct 31, 2019

weblogic_cve-2019-2890

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References

http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html