CVE-2019-2725
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).
CISA Known Exploited Vulnerability
Vendor / Product
Oracle — WebLogic Server
Date Added
2022-01-10
Remediation Due
2022-07-10
Ransomware Use
CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2019-2725
Weakness Classification (1)
Affected Software (18)
| Vendor | Product | Version |
|---|---|---|
| oracle | agile_product_lifecycle_management | 9.3.3 |
| oracle | agile_product_lifecycle_management | 9.3.4 |
| oracle | agile_product_lifecycle_management | 9.3.5 |
| oracle | communications_converged_application_server | 5.1 |
| oracle | communications_converged_application_server | 7.0 |
| oracle | communications_converged_application_server | 7.1 |
| oracle | peoplesoft_enterprise_peopletools | 8.56 |
| oracle | peoplesoft_enterprise_peopletools | 8.57 |
| oracle | peoplesoft_enterprise_peopletools | 8.58 |
| oracle | storagetek_tape_analytics_sw_tool | 2.3 |
| oracle | tape_library_acsls | 8.5 |
| oracle | tape_virtual_storage_manager_gui | 6.2 |
| oracle | vm_virtualbox | < 5.2.36 |
| oracle | vm_virtualbox | 6.0.0 – 6.0.16 |
| oracle | vm_virtualbox | 6.1.0 – 6.1.2 |
| oracle | vm_virtualbox | 5.2.36 |
| oracle | weblogic_server | 10.3.6.0.0 |
| oracle | weblogic_server | 12.1.3.0.0 |
References & Advisories (9)
US Government Resource
Third Party Advisory
VDB Entry
Third Party Advisory
Patch
Vendor Advisory
Patch
Vendor Advisory
Patch
Vendor Advisory
Patch
Vendor Advisory
Exploit
Third Party Advisory
VDB Entry
Broken Link