Published: 17/10/2018 Updated: 03/10/2019

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 756

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle weblogic server 12.1.3.0.0
oracle weblogic server 10.3.6.0.0
oracle weblogic server 12.2.1.3.0

// All respects goes to Zhiyi Zhang of 360 ESG Codesafe Team // URL: blogsprojectmoonpw/2018/10/19/Oracle-WebLogic-Two-RCE-Deserialization-Vulnerabilities/ package ysoserialpayloads; import comsunjndirmiregistryReferenceWrapper_Stub; import sunrmiserverUnicastRef; import sunrmitransportLiveRef; import sunrmitransporttcpTC ...

CVE-2018-3245

Weblogic-CVE-2018-3245 CVE-2018-3245 0x00 简介当地时间10月16日，北京时间10月17日凌晨，Oracle官方发布了10月份（第三季度）关键补丁更新CPU（Critical Patch Update）, 其中修复了一个7月份（第二季度）CPU补丁中未能完全修复的（CVE-2018-2893）Weblogic远程代码执行漏洞，此次新修复的漏洞编号为CVE-2018-324

CVE-2018-3245

CVE-2018-3245 Step 1 java -jar ysoserial-cve-2018-3245jar WHY SO SERIAL? Usage: java -jar ysoserial-cve-2018-3245jar [payload] '[command]' Available payload types: Payload Authors Dependencies ------- ------- ------------ CVE_2018_2893_1 @mbechler CVE_2018_2893_2 @mbechler CVE_2018_2893_3 @mbechler CVE_2018_3245 @m

CVE-2018-3245-PoC

CVE-2018-3245 Step 1 java -jar ysoserial-cve-2018-3245jar Usage: java -jar ysoserial-cve-2018-3245jar [payload] '[command]' Available payload types: Payload Authors Dependencies ------- ------- ------------ CVE_2018_2893_1 @mbechler CVE_2018_2893_2 @mbechler CVE_2018_2893_3 @mbechler CVE_2018_3245 @mbechler JR

CWE-502 http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html http://www.securitytracker.com/id/1041896 http://www.securityfocus.com/bid/105613 https://www.exploit-db.com/exploits/46513/https://nvd.nist.gov https://github.com/jas502n/CVE-2018-3245 https://www.exploit-db.com/exploits/46513

CVE-2018-3245

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect