CVE-2018-2628 Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1....
CriticalCVSS 9.8
EPSS 100.0%
CISA KEV
added 2022-09-08 · due 2022-09-29
Exploited in the wild
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CISA Known Exploited Vulnerability
- Date added
- 2022-09-08
- Due date (FCEB)
- 2022-09-29
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle weblogic server | = 10.3.6.0.0 | No fix listed |
| oracle weblogic server | = 12.1.3.0.0 | No fix listed |
| oracle weblogic server | = 12.2.1.2.0 | No fix listed |
| oracle weblogic server | = 12.2.1.3 | No fix listed |
| oracle weblogic server | = 10.3.6.0 | No fix listed |
| oracle weblogic server | = 12.1.3.0 | No fix listed |
| oracle weblogic server | = 12.2.1.2 | No fix listed |
References
- www.oracle.com patch vendor-advisory
- 103776 broken-link third-party-advisory vdb-entry
- 1040696 broken-link third-party-advisory vdb-entry
- github.com broken-link
- 44553 exploit third-party-advisory vdb-entry
- 45193 exploit third-party-advisory vdb-entry
- 46513 exploit third-party-advisory vdb-entry
- www.cisa.gov government-resource us-government-resource