.. / CVE-2019-2725

• RCE
• Nuclei
• Web

Exploit for Oracle WebLogic Server - Remote Command Execution (CVE-2019-2725)

Description:

The Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services) allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. Versions that are affected are 10.3.6.0.0 and 12.1.3.0.0.

Nuclei Template

View the template here CVE-2019-2725.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-2725.yaml

References: