/?pid=oracle-issues-emergency-update-20909

Updated:03:16 PM EST Feb 19


this is ggmania.com subsite Oracle issues emergency update - TechAmok

Oracle issues emergency update - [security]
05:09 PM EDT - Jun,19 2019 - post a comment

Oracle on Tuesday published an out-of-band update patching a critical code-execution vulnerability in its WebLogic server after researchers warned that the flaw was being actively exploited in the wild.

The vulnerability, tracked as CVE-2019-2729, allows an attacker to run malicious code on the WebLogic server without any need for authentication. That capability earned the vulnerability a Common Vulnerability Scoring System score of 9.8 out of 10. The vulnerability is a deserialization attack targeting two Web applications that WebLogic appears to expose to the Internet by default - wls9_async_response and wls-wsat.war.

The flaw in Oracle's WebLogic Java application servers came to light as a zero-day four days ago when it was reported by security firm KnownSec404.

This isn't the first, or even second, deserialization attack that has been used to target these services. The wls-wsat component was successfully exploited in a similar fashion in 2017, and KnownSec404 reported another one in April. The 2017 vulnerability was largely used to install bitcoin miners; April's vulnerability was exploited in cryptojacking and ransomware campaigns. Oracle's current out-of-band patch and advisory notice has not officially acknowledged the active exploitation of CVE-2019-2729, but it does mark the vulnerability as high risk and advises customers to apply the out-of-band patch as soon as possible.

Short overview of recent news articles

OpenClaw’s Top Skill is a Malware that Stole SSH Keys and Opened (Feb,19 2026 )

Google Adds Satellite SOS to its Affordable Pixel Phone (Feb,19 2026 )

Phison CEO Warns: AI-Driven NAND and DRAM Shortage Could Bankrupt (Feb,19 2026 )

NVIDIA CEO hypes up GTC 2026, promises to unveil a chip that will (Feb,19 2026 )

Microsoft is uploading your confidential emails to Copilot for (Feb,19 2026 )

Anthropic Releases Claude Sonnet 4.6 with Improved Coding, Computer (Feb,18 2026 )

Apple Eyeing A Partnership With Chinese Memory Makers YMTC And CXMT (Feb,17 2026 )

This $60,000 TV was IRRESISTIBLE (Feb,17 2026 )

Keenadu Android Backdoor Infects Firmware, Spreads via Google Play (Feb,17 2026 )

Discord's ID Check Nightmare Sparks Massive Exodus to TeamSpeak (Feb,17 2026 )

Amazing Robot Performance at the 2026 Spring Festival Gala (Feb,17 2026 )

Apple brings video podcasts and other improvements in iOS 26.4 beta (Feb,16 2026 )

Dutch Defence Secretary Boldly Claims F-35 Software Could Be (Feb,16 2026 )

Samsung shows off Galaxy S26 Ultra privacy display (Feb,16 2026 )

60 Million Passwords Exposed? ETH Zurich Shatters 'Unbreakable' (Feb,16 2026 )

Apple MacBook with iPhone chip launches next month (Feb,15 2026 )

Discord's Disturbing Ties to Global Surveillance | ID Verification, (Feb,15 2026 )

20 Mind-Blowing Tech Gadgets You MUST See in 2026! (Feb,15 2026 )

Western Digital's HDD production capacity for 2026 is fully sold (Feb,15 2026 )

Google Releases First Beta Version of Android 17 (Feb,14 2026 )

The Audiophile Gaming Headset - HIFIMAN x ROG Kithara (Feb,14 2026 )

7zip Malware: Beware 7zip.com (Feb,14 2026 )

REDMAGIC 11 Pro Review: Can This Be Your ONLY Phone? (Feb,14 2026 )

Google Docs now has AI-generated audio summaries (Feb,13 2026 )

Apple Patches Actively Exploited Zero-Day Vulnerability Across (Feb,13 2026 )

What is the Windows.old folder and can I delete it? (Feb,13 2026 )

Microsoft AI CEO Mustafa Suleyman: 'Most White Collar Work Will Be (Feb,12 2026 )

Helldivers Movie Lands November 2027 Release, Jason Momoa to Star (Feb,12 2026 )

Apple 0-Day Vulnerability Actively Exploited in Sophisticated Attack (Feb,12 2026 )

Apple releases iOS 26.3 and iPadOS 26.3 to the public (Feb,11 2026 )

T-Mobile Announces Live Audio Language Translation as a Network (Feb,11 2026 )

Windows 11 26H1 Drops Exclusively on New Snapdragon X2 Devices - No (Feb,10 2026 )

Fake 7-Zip downloads are turning home PCs into proxy nodes (Feb,10 2026 )

Microsoft Patch Tuesday February 2026 - 54 Vulnerabilities Fixed, (Feb,10 2026 )

Snapdragon X2 Elite Early - Performance Preview (Feb,10 2026 )

AI Chat App Exposes 300 Million Messages from 25 Million Users (Feb,10 2026 )

My Kids can Pick ANY Phone They Want For a Present (Feb,09 2026 )

Microsoft Removes Printer Drivers in Windows 11 Update - What You (Feb,09 2026 )

Apple's Next AirPods Pro Will Literally See the World Around You (Feb,09 2026 )

Beware of Apple Pay Phishing Attack that Aims to Steal Your Payment (Feb,09 2026 )

NASA to Allow Astronauts to Bring Smartphones to Space (Feb,08 2026 )

AT&T Launches New Samsung Phone for Kids (Feb,08 2026 )

Headphones with Noise Cancelling that Don't Stick in your Ear - (Feb,07 2026 )

Microsoft Just Killed Your Old Printer: Legacy Drivers Officially (Feb,07 2026 )

RenEngine Loader and HijackLoader Duo Infects Over 400,000 Gamers in (Feb,06 2026 )

EpsteIn Tool: Check If Your LinkedIn Contacts Appear in 3.5 Million (Feb,06 2026 )

Bitcoin's $64,000 Reality vs. $87K+ Production Costs Sparks (Feb,05 2026 )

Crypto Analyst Issues Urgent 'Final Warning' on XRP: Claims (Feb,05 2026 )

AI-Powered Breach: Hacker Claims AWS Kingdom in Under 10 Minutes (Feb,04 2026 )

Microsoft Axes Standalone SharePoint and OneDrive Plans in Push to (Feb,04 2026 )

>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs