Cybersecurity Alerts

Oracle WebLogic Server Unspecified Vulnerability

Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-502

References

• https://www.oracle.com/security-alerts/cpuapr2018.html
• https://nvd.nist.gov/vuln/detail/CVE-2018-2628