CVE-2019-2576

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Bus. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Service Bus. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

• http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Vendor Advisory
• http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.htmlPatch, Vendor Advisory

Published

Apr 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25754Joomla Component vRestaurant 1.9.4 contains an SQL injection…8.8
• CVE-2019-25755Joomla Component vReview 1.9.11 contains an SQL injection vu…8.8
• CVE-2019-25756Joomla! Component vAccount 2.0.2 contains an SQL injection v…8.8
• CVE-2019-25757Joomla vWishlist 1.0.1 contains an SQL injection vulnerabili…7.1
• CVE-2019-25758Joomla! Component vBizz 1.0.7 contains an unrestricted file …8.8
• CVE-2019-25759Joomla! Component vBizz 1.0.7 contains an SQL injection vuln…7.1
• CVE-2019-25760Joomla! Component Easy Shop 1.2.3 contains a local file incl…6.9
• CVE-2019-25761Joomla! Component JoomCRM 1.1.1 contains an SQL injection vu…7.1
• CVE-2019-25762Joomla! Component JoomProject 1.1.3.2 contains an informatio…8.7
• CVE-2019-25763WordPress Ultimate Addons for Beaver Builder 1.2.4.1 contain…9.8
• CVE-2019-25764**UNSUPPORTED WHEN ASSIGNED**  Exposed IOCTL with Insufficie…7.3
• CVE-2019-2577Vulnerability in the Oracle Solaris component of Oracle Sun …