Oracle WebLogic Remote Code Execution Vulnerability

Last Update Date: 4 May 2018 09:55 Release Date: 4 May 2018 6601 Views

RISK: Extremely High Risk

TYPE: Servers - Other Servers

A vulnerability has been identified in Oracle WebLogic server, a remote user can exploit this vulnerability to trigger Remote Code Execution on the targeted system.

Notes: The vulnerability is being exploited in the wild.

Notes: No patch is currently available.

Impact

Remote Code Execution

System / Technologies affected

WebLogic server with 17 April 2018 Patch Level or before.

Solutions

Notes: No patch is currently available.
Please use the firewall to protect the TCP port 7001.

Vulnerability Identifier

CVE-2018-2628

Source

SANS