vulnwire
9.8crit

CVE-2018-2628KEVin critical feed4 exploitsNuclei template

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).

Published 8 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.1 · CNA
CISA KEV
Yes
added 2022-09-08
EPSS
100.0%
percentile 100%
Public exploits
4
Metasploit · Exploit-DB · Nuclei check

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Known exploited (CISA KEV)

Added
4 y ago
Due date
2022-09-29 (4 y ago)
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Vendor / product
Oracle / WebLogic Server
CISA name
Oracle WebLogic Server Unspecified Vulnerability

CISA SSVC assessment

Exploitation
Active — exploited in the wild
Automatable
yes
Technical impact
total
Assessed
2 y ago

Exploit prediction (EPSS)

99.96% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • Nuclei template Oracle WebLogic Server Deserialization - Remote Code Execution · nuclei detection template
  • Metasploit exploit/multi/misc/weblogic_deserialize Oracle Weblogic Server Deserialization RCE · metasploit exploit, manual rank · 2018-04-17
  • EDB-46513 Oracle Weblogic Server - Deserialization Remote Command Execution (Patch Bypass) · remote · 2018-10-25
  • EDB-45193 Oracle Weblogic Server - Deserialization Remote Code Execution (Metasploit) · remote · 2018-08-13
  • EDB-44553 Oracle Weblogic Server 10.3.6.0 / 12.1.3.0 / 12.2.1.2 / 12.2.1.3 - Deserialization Remote Command Execution · remote · 2018-04-22

CVSS scores

Assigned byVersionScoreVector
CISA ADP3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • Oracle Corporation WebLogic Server

Classification

Weakness
  • CWE-502 Deserialization of Untrusted Data

References

  • github.com /brianwrf/CVE-2018-2628 · x_refsource_MISC, x_transferred
  • exploit-db.com /exploits/44553/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • securityfocus.com /bid/103776 · vdb-entry, x_refsource_BID, x_transferred
  • securitytracker.com /id/1040696 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • exploit-db.com /exploits/46513/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • oracle.com /technetwork/security-advisory/cpuapr2018-3678067.html · x_refsource_CONFIRM, x_transferred
  • exploit-db.com /exploits/45193/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-2628 · government-resource

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.