← ExploitWatch
HomeExploited Vulnerabilities

CVE-2019-2725 — Actively Exploited: WebLogic Server (Oracle)

Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

CVE IDCVE-2019-2725
VendorOracle
ProductWebLogic Server
Vulnerability nameOracle WebLogic Server, Injection
Date added2022-01-10
Remediation due2022-07-10
Known ransomware useKnown
Required actionApply updates per vendor instructions.
DescriptionInjection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →