Every CVE Search/ Get API key

CVE-2019-2725

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:...

7.5 HighIn KEVPublic exploit

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

100.0%Up 92.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 7.5

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Record
CVE-2019-2725
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2019-12364 7.5

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Record
EUVD-2019-12364
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-m437-3crh-7475 9.8

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:...

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Record
GHSA-m437-3crh-7475
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-74
Updated
2026-11-02
CISA KEV No score

Oracle WebLogic Server, Injection

Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

Record
CVE-2019-2725
Weakness
CWE-74
Updated
2026-11-02
NVD 9.8

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Record
CVE-2019-2725
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-74
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubshack2/javaserializetools2018-09-13
MetasploitOracle Weblogic Server Deserialization RCE - AsyncResponseService2019-04-23
PoC in GitHubSkyBlueEternal/CNVD-C-2019-48814-CNNVD-201904-9612019-04-25
Exploit-DBOracle Weblogic 10.3.6.0.0 / 12.1.3.0.0 - Remote Code Execution2019-04-30
PoC in GitHublasensio/cve-2019-27252019-05-01
PoC in GitHubdavidmthomsen/CVE-2019-27252019-05-02
PoC in GitHubleerina/CVE-2019-27252019-05-05
Exploit-DBOracle Weblogic Server - 'AsyncResponseService' Deserialization Remote Code Execution (Metasploit)2019-05-08
PoC in GitHubzhusx110/cve-2019-27252019-05-10
PoC in GitHubpeterpeter228/CNTA-2019-0014xCVE-2019-27252019-05-14
Show 13 moreShow less
Public exploits
SourceLinkDate
PoC in GitHublufeirider/CVE-2019-27252019-05-29
PoC in GitHubwelove88888/CVE-2019-27252019-06-11
PoC in GitHubjiansiting/CVE-2019-27252019-06-15
PoC in GitHubkerlingcode/CVE-2019-27252019-06-16
PoC in GitHubblack-mirror/Weblogic2019-06-24
PoC in GitHubpimps/CVE-2019-27252019-08-23
PoC in GitHubianxtianxt/CVE-2019-27252019-11-05
PoC in GitHubN0b1e6/CVE-2019-2725-POC2019-12-12
PoC in GitHubGGyao/weblogic_2019_2725_wls_batch2020-01-08
PoC in GitHubludy-dev/Oracle-WLS-Weblogic-RCE2020-08-31
PoC in GitHubCalegariMindSec/Exploit-CVE-2019-27252023-11-11
PoC in GitHubloursha/Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-27252026-01-19
NucleiOracle WebLogic Server - Remote Command Execution

History

History
RecordedChangedSources
exploitation, exploits
first indexedCVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-2725 is a high vulnerability (CVSS 7.5) in Oracle Weblogic Server, published April 26, 2019. CISA lists it as known to be exploited, since January 10, 2022. EUVD reports exploitation since January 10, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 100.0%, the 99th percentile. No source names a fixed version.

References

Show 5 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open