CVE-2019-2725

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 26-04-2019 09:29

Last modified: - 27-04-2022 06:39

Total changes: - 3

Description

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

9.8

Base score

3.9

5.9

Exploitability score

Impact score

Verification logic

vendor=oracle AND product=agile_plm AND version=9.3.3

vendor=oracle AND product=agile_plm AND version=9.3.4

vendor=oracle AND product=agile_plm AND version=9.3.5

vendor=oracle AND product=communications_converged_application_server AND version=5.1

vendor=oracle AND product=communications_converged_application_server AND version=7.0

vendor=oracle AND product=communications_converged_application_server AND version=7.1

vendor=oracle AND product=peoplesoft_enterprise_peopletools AND version=8.56

vendor=oracle AND product=peoplesoft_enterprise_peopletools AND version=8.57

vendor=oracle AND product=peoplesoft_enterprise_peopletools AND version=8.58

vendor=oracle AND product=storagetek_tape_analytics_sw_tool AND version=2.3

vendor=oracle AND product=tape_library_acsls AND version=8.5

vendor=oracle AND product=tape_virtual_storage_manager_gui AND version=6.2

vendor=oracle AND product=vm_virtualbox AND versionEndExcluding=5.2.36

vendor=oracle AND product=vm_virtualbox AND version=5.2.36

vendor=oracle AND product=vm_virtualbox AND versionStartIncluding=6.0.0 AND versionEndExcluding=6.0.16

vendor=oracle AND product=vm_virtualbox AND versionStartIncluding=6.1.0 AND versionEndExcluding=6.1.2

vendor=oracle AND product=weblogic_server AND version=10.3.6.0.0

vendor=oracle AND product=weblogic_server AND version=12.1.3.0.0

Reference

Keywords

CVE-2019-2725

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2019-2725

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures