ZeroDay Findings
Sign inSign up

Findings

CVE-2018-2628

Oracle WebLogic Server Unspecified Vulnerability

Published Apr 18, 2018 · updated Jun 16, 2026 · oracle weblogic server

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Timeline

Detection, updates, and resolution for this record.

  1. Apr 18, 2018 · Catalog

    Detected

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of

  2. Sep 8, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Sep 29, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of

Required action

Apply updates per vendor instructions.

CISA due date Sep 29, 2022

Affected

  • cpe oracle/weblogic server10.3.6.0.0
  • cpe oracle/weblogic server12.1.3.0.0
  • cpe oracle/weblogic server12.2.1.2.0
  • cpe oracle/weblogic server12.2.1.3
  • vendor Oracle WebLogic Serverversion unspecified

Sources

  • CISA KEVCVE-2018-2628

    Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.

    cisa.gov
  • CVE.orgCVE-2018-2628

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2018-2628

    30-day exploitation probability 100.0%

    first.org
  • Exploit Database44553

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit Database45193

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit Database46513

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_multi/misc/weblogic_deserialize

    Public module reference (manual). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2018-2628

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network

    nvd.nist.gov

References