/?pid=oracle-issues-emergency-update-20909

Updated:11:20 AM EDT Apr 23


this is ggmania.com subsite Oracle issues emergency update - TechAmok

Oracle issues emergency update - [security]
05:09 PM EDT - Jun,19 2019 - post a comment

Oracle on Tuesday published an out-of-band update patching a critical code-execution vulnerability in its WebLogic server after researchers warned that the flaw was being actively exploited in the wild.

The vulnerability, tracked as CVE-2019-2729, allows an attacker to run malicious code on the WebLogic server without any need for authentication. That capability earned the vulnerability a Common Vulnerability Scoring System score of 9.8 out of 10. The vulnerability is a deserialization attack targeting two Web applications that WebLogic appears to expose to the Internet by default - wls9_async_response and wls-wsat.war.

The flaw in Oracle's WebLogic Java application servers came to light as a zero-day four days ago when it was reported by security firm KnownSec404.

This isn't the first, or even second, deserialization attack that has been used to target these services. The wls-wsat component was successfully exploited in a similar fashion in 2017, and KnownSec404 reported another one in April. The 2017 vulnerability was largely used to install bitcoin miners; April's vulnerability was exploited in cryptojacking and ransomware campaigns. Oracle's current out-of-band patch and advisory notice has not officially acknowledged the active exploitation of CVE-2019-2729, but it does mark the vulnerability as high risk and advises customers to apply the out-of-band patch as soon as possible.

Short overview of recent news articles

ATLAS | Official Trailer | Netflix (Apr,23 2024 )

The World's Fastest CPU (Technically...) - Intel i9-14900KS (Apr,22 2024 )

We can do THIS now! - Lumafield CT Scanner (Apr,22 2024 )

Huawei Pura 70 Ultra - Apple Should be WORRIED (Apr,21 2024 )

Sony 2024 TV Lineup Revealed (Apr,21 2024 )

ICE - A Thousand Suns / Episode 1 (Apr,20 2024 )

Minisforum V3 AMD Tablet Review (Apr,20 2024 )

AMD & Intel SLASH CPU Prices! (Apr,20 2024 )

EK is Imploding: Not Paying Employees, Partners, & Suppliers (Apr,20 2024 )

Backing Up My NAS To My... Parents' House? (Apr,20 2024 )

NEW Ryzen APU BEATS RTX 40 GPUs! (Apr,20 2024 )

(Live) Black Tape Project - All New Raw and Uncut - LA Fashion Week (Apr,20 2024 )

NVIDIA Geforce 552.22 WHQL Driver (Apr,19 2024 )

You Deserve this much OLED - AORUS CO49DQ (Apr,19 2024 )

Unreal Engine 5.4 looks ULTRA PHOTOREALISTIC (Apr,19 2024 )

Radeon RX 5700 XT vs. 7700 XT, 2024 Revisit (Apr,18 2024 )

I Will Build You a PC Right Now! (Apr,18 2024 )

These games carry REAL security risks! BEWARE! (Apr,17 2024 )

Visible First to Offer Annual Payment Plan, with Discount up to 26% (Apr,17 2024 )

Is Coding Still Worth Learning in 2024? (Apr,17 2024 )

All New Atlas - Boston Dynamics (Apr,17 2024 )

The NEW Chip Inside Your Phone! (NPUs) (Apr,16 2024 )

XPS 14 vs 14" MacBook Pro - Apple just KILLED Intel! (Apr,16 2024 )

The Most 2024 Laptop - Razer Blade 14 Review (Apr,15 2024 )

NEVER install these programs on your PC... EVER!!! (Apr,15 2024 )

Use Live Translate on Galaxy S24 series to translate a call's (Apr,14 2024 )

I Tried a Non-Invasive Blood Sugar Watch. Miracle or Scam? (Apr,14 2024 )

Samsung Galaxy Ring - This Just Got Interesting (Apr,13 2024 )

Piracy Is Over Party - WAN Show April 12, 2024 (Apr,13 2024 )

Conan O'Brien Needs a Doctor While Eating Spicy Wings (Apr,13 2024 )

Beatbox Jcob recreats every sound (Apr,13 2024 )

Intel is Gunning for NVIDIA (Apr,13 2024 )

Building a Budget DIY Home Surveillance System (Apr,13 2024 )

Lenovo Yoga Buyers Guide - What's the Best Thin and Light Laptop (Apr,12 2024 )

DARK MATTER Trailer (2024) New Sci-Fi Movies 4K (Apr,11 2024 )

How to Build a PC, the last guide you'll ever need! (2024 Update) (Apr,11 2024 )

Intel 300 CPU Review - The Pentium Replacement is Finally Here... (Apr,10 2024 )

Wubuntu, the Dubious Linux Windows (Apr,10 2024 )

A Lite Version Of Windows 11 To Be Released This Year (Apr,09 2024 )

This $150 Smartphone might be All You Need (Apr,09 2024 )

I Can't Believe These are Real - Reacting to Ridiculous PCs on (Apr,09 2024 )

A new video shows AirPower prototype charging an Apple Watch (Apr,08 2024 )

Google Deleting Incognito Data, Intel $7B Foundry Loss, $350+ Curved (Apr,08 2024 )

20 COOL GADGETS YOU SHOULD SEE (Apr,08 2024 )

New HTTP/2 vulnerability leaves servers in danger of devastating DoS (Apr,08 2024 )

3D Printed PC Fan Test: Does the Anti-Stall Ring Boost Performance? (Apr,07 2024 )

The Greatest GPU of All Time: NVIDIA GTX 1080 Ti & GTX 1080 2024 (Apr,06 2024 )

Top NEW RELEASES on Netflix in APRIL 2024 (Apr,06 2024 )

Magician vs Slow-Mo Camera (Skill Challenge) (Apr,05 2024 )

Re-Ranking All Current GPUs From Worst to Best (2024 Update) (Apr,05 2024 )

>> News Archive <<

TechAmok - Privacy Policy        loading time:0.01secs