CVE-2018-2628

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-09-08

Reference

https://nvd.nist.gov/vuln/detail/CVE-2018-2628

⚡ RCE ⌖ exploited in the wild shame 65/100 rceexploited-in-wild

Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.

Players implicated

Oracle · vendor WebLogic Server · product

Description

Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.

Affected FedRAMP products 10 in the catalog

Product	Provider	Status	Match
Aconex for Defense	Oracle	Authorized	vendor-exact · 0.90
Federal Managed Cloud Services	Oracle	Authorized	vendor-exact · 0.90
Fusion Cloud	Oracle	Authorized	vendor-exact · 0.90
Government Cloud - Common Controls	Oracle	Authorized	vendor-exact · 0.90
Oracle Cloud Infrastructure-Government Cloud	Oracle	Authorized	vendor-exact · 0.90
Oracle Enterprise Performance Management (EPM)	Oracle	Authorized	vendor-exact · 0.90
Oracle Enterprise Performance Management (EPM) - Moderate	Oracle	In Process	vendor-exact · 0.90
Oracle Service Cloud	Oracle	Authorized	vendor-exact · 0.90
Oracle Service Cloud (DOD)	Oracle	Authorized	vendor-exact · 0.90
Taleo Cloud - U.S. Government Cloud	Oracle	Authorized	vendor-exact · 0.90