CVE-2018-2628 — Oracle WebLogic Server Unspecified Vulnerability
CVE-2018-2628: Oracle WebLogic Server Unspecified Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Oracle |
| Product | WebLogic Server |
| Date added | 2022-09-08 |
| Due date | 2022-09-29 |
| Ransomware campaign use | Unknown |
Description
Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://www.oracle.com/security-alerts/cpuapr2018.html; https://nvd.nist.gov/vuln/detail/CVE-2018-2628
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-2628
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog