CVE-2018-2628
Oracle WebLogic Server Unspecified Vulnerability
CVSS
—
Sem CVSS
EPSS
100.0%
p100
KEV
SIM
8 de set. de 2022
Exploit Today
80
0-100
Publicado: — · Última mod.: —
100.0%EPSS · 30 dias100.0%
2026-10-082026-11-05
Produto
Oracle / WebLogic Server
Vulnerabilidade
Oracle WebLogic Server Unspecified Vulnerability
Adicionado ao KEV
8 de set. de 2022
Corrigir até
29 de set. de 2022
Uso conhecido em ransomware
Não
Descrição resumida
Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.
Ação necessária
Apply updates per vendor instructions.
Notas
https://www.oracle.com/security-alerts/cpuapr2018.html; https://nvd.nist.gov/vuln/detail/CVE-2018-2628
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2019-27259.8 CRÍ100.0%
KEV—80Oracle WebLogic Server, Injection35dCVE-2017-102717.5 ALT100.0%
KEV—80Oracle Corporation WebLogic Server Remote Code Execution Vulnerability85dCVE-2020-14882—100.0%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2023-21839—100.0%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2020-14750—99.9%
KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2020-14883—99.9%
KEV—80Oracle WebLogic Server Unspecified Vulnerability—