.. / CVE-2018-2894

• RCE
• Nuclei
• Web

Exploit for Oracle WebLogic Server - Remote Code Execution (CVE-2018-2894)

Description:

The Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services) is susceptible to a remote code execution vulnerability that is easily exploitable and could allow unauthenticated attackers with network access via HTTP to compromise the server. Supported versions that are affected are 12.1.3.0, 12.2.1.2 and 12.2.1.3.

Nuclei Template

View the template here CVE-2018-2894.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-2894.yaml

References: