.. / CVE-2019-2729

• RCE
• Nuclei
• Web

Exploit for Oracle WebLogic Server Administration Console - Remote Code Execution (CVE-2019-2729)

Description:

The Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services) versions 0.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server.

Nuclei Template

View the template here CVE-2019-2729.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-2729.yaml

References: