Oracle WebLogic RCE

CVE-2018-2894 is a vulnerability found in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services).12.1.3.0, 12.2.1.2, and 12.2.1.3 are the supported versions that are affected. Oracle WebLogic Server is vulnerable to an easily exploited vulnerability that allows an unauthenticated attacker with network access through HTTP to compromise it. Oracle WebLogic Server may be taken over if this vulnerability is exploited successfully.

Mitigation / Precaution

In order to patch this vulnerability, please install the official patch Oracle made available for supported, vulnerable instances.

Written by

Sooraj V Nair

Cyber Security Engineer

Sooraj was probably the kid who opened up a remote control just to see what was inside, then had to figure out how to put it back together before anyone noticed. That curiosity eventually found its way into cybersecurity, where breaking things is actually part of the job description. Today, he explores vulnerabilities, analysis threats, and helps build safer digital spaces. His favourite question remains the same: “What happens if I try this?”