← KEV catalog
CISA known exploited vulnerability

CVE-2019-2725

Oracle WebLogic Server, Injection

SOURCE FACT

Oracle · WebLogic Server

Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2019-2725

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?