The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities:

  - An unspecified vulnerability allows a remote unauthenticated     attacker with network access to compromise and takeover the     StorageTek Tape Analytics SW Tool. (CVE-2019-2725) (CVE-2019-2729)

  - An unspecified vulnerability allows a remote unauthenticated     attacker with network access to compromise and takeover the     Tape Virtual Storage Manager GUI. (CVE-2019-2725)

  - An unspecified vulnerability in the WLS Core Component allows an     authenticated low privileged attacker with network     access via HTTP to compromise Oracle WebLogic Server, resulting     in unauthorized update, insert or delete access to Oracle     WebLogic Server accessible data. (CVE-2019-2824) (CVE-2019-2827)

  - An unspecified vulnerability in the jQuery Component allows an     authenticated low privileged attacker with network     access via HTTP to compromise Oracle WebLogic Server, resulting     in unauthorized update, insert or delete access to Oracle     WebLogic Server accessible data. Successful attacks require     human interaction from actions from another Weblogic user.
    (CVE-2016-71030)

  - An unspecified vulnerability in the Application Container - JavaEE     Component of Oracle WebLogic Server allows an unauthenticated     attacker with network access via T3 to compromise Oracle WebLogic     Server. A successful attack of this vulnerability could result in     takeover of Oracle WebLogic Server. (CVE-2019-2856)     
  - An unspecified vulnerability in the Sample apps (Spring Framework)     Component of Oracle WebLogic Server allows an unauthenticated     attacker with network access via HTTP to compromise Oracle WebLogic     Server. A successful attack of this vulnerability could result in     unauthorized ability to cause a hang or frequently repeatable crash     (complete DOS) of Oracle WebLogic Server. (CVE-2018-15756)

Detections

Analytics

Oracle WebLogic Server Multiple Vulnerabilities (Jul 2019 CPU)

critical Nessus Plugin ID 126915

Version 1.19

Version 1.18

Version 1.17

Version 1.16

Version 1.19 Jan 4, 2024, 3:23 PM Detection Plugin Feed: 202401041523
Version 1.18 Dec 12, 2023, 5:15 PM Detection Plugin Feed: 202312121715
Version 1.17 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 1.16 Dec 6, 2022, 6:51 PM Reference Plugin Feed: 202212061851