CVE-2019-2729: Critical severity oracle communications diameter signaling router vulnerability
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2729?
The severity of CVE-2019-2729 is critical.
How does CVE-2019-2729 affect Oracle WebLogic Server?
CVE-2019-2729 affects Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0.
Is CVE-2019-2729 easily exploitable?
Yes, CVE-2019-2729 is an easily exploitable vulnerability.
Who can exploit CVE-2019-2729?
An unauthenticated attacker with network access via HTTP can exploit CVE-2019-2729.
Are there any known fixes or patches for CVE-2019-2729?
Yes, Oracle has released patches and advisories to address CVE-2019-2729. Please refer to the references for more information.