⚠ Exploited in the wild
Exploitation observed in the wild. Not yet on CISA KEV.

CVE-2018-2893Corporation Weblogic Server vulnerability

8 documents7 sources
Severity
9.8CRITICALNVD
EPSS
94.3%
top 0.06%
CISA KEV
Not in KEV
Exploit
Exploited in wild
Active exploitation observed
Timeline
PublishedJul 18
Latest updateMay 13

Description

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

NVDoracle/weblogic_server4 versions+3
CVEListV5oracle_corporation/weblogic_server4 versions+3

Patches

🔴Vulnerability Details

3
GHSA
GHSA-7h6c-94v2-f6xx: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)2022-05-13
CVEList
CVE-2018-2893: Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components)2018-07-18
VulnCheck
Oracle WebLogic Server Core Components T3 Network Access Vulnerability2018

💥Exploits & PoCs

1
Nuclei
Oracle WebLogic Server - Remote Code Execution

🔍Detection Rules

1
Suricata
ET WEB_SPECIFIC_APPS Oracle WebLogic Deserialization (CVE-2018-2893)2018-08-01

🕵️Threat Intelligence

2
Tenable
August Vulnerability of the Month: Critical Vulnerability in Oracle WebLogic Targeted by Attackers2018-08-30
Tenable
August Vulnerability of the Month: Critical Vulnerability in Oracle WebLogic Targeted by Attackers2018-08-30
CVE-2018-2893 — CRITICAL severity | cvebase