CVE-2019-2725CISA KEV
Oracle WebLogic Server, Injection
CISA lists this Oracle WebLogic Server vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).
- Product
- WebLogic Server
- Added to KEV
- 10 Jan 2022
- Federal remediation due
- 10 Jul 2022
- Known ransomware use
- Yes