Oracle WebLogic Affected by Unauthenticated Remote Code Execution Vulnerability (CVE-2019-2725)

On April 17, China National Vulnerability Database (CNVD) published a security bulletin about an unauthenticated remote command execution (RCE) vulnerability in Oracle WebLogic (CNVD-C-2019-48814). This vulnerability could allow a remote attacker to execute arbitrary code on vulnerable WebLogic servers.

For more information, please visit our Tenable blog.