CVE-2019-2568

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 5.0 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N).

• http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Vendor Advisory
• http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Vendor Advisory

Published

Apr 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25674CMSsite 1.0 contains an SQL injection vulnerability that all…9.8
• CVE-2019-25675eDirectory contains multiple SQL injection vulnerabilities t…7.5
• CVE-2019-25676Ask Expert Script 3.0.5 contains cross-site scripting and SQ…9.8
• CVE-2019-25677WinRAR 5.61 contains a denial of service vulnerability that …5.5
• CVE-2019-25678C4G Basic Laboratory Information System 3.4 contains multipl…7.5
• CVE-2019-25679RealTerm Serial Terminal 2.0.0.70 contains a structured exce…8.5
• CVE-2019-25680Advance Gift Shop Pro Script 2.0.3 contains an SQL injection…9.8
• CVE-2019-25681Xlight FTP Server 3.9.1 contains a structured exception hand…7.8
• CVE-2019-25682CMSsite 1.0 contains a cross-site request forgery vulnerabil…4.3
• CVE-2019-25683FileZilla 3.40.0 contains a denial of service vulnerability …5.5
• CVE-2019-25684OpenDocMan 1.3.4 contains an SQL injection vulnerability tha…8.2
• CVE-2019-25685Rejected reason: This CVE ID has been rejected or withdrawn …