CVE-2019-2725

Vulnerability details

Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).

Added to CISA KEV: 2022-01-10

Ransomware campaign use: Known

CISA due date: 2022-07-10

Defensive guidance from CISA

Apply updates per vendor instructions.

This is the source's required-action field, not an independently validated patch procedure. Refer to the vendor for exact affected versions and fixes.