CVE-2018-2628—Oracle WebLogic Server Unspecified Vulnerability

PUBLISHEDvulnerability record
2022-09-08 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2018-2628
Project:
Oracle
Product:
WebLogic Server
Date Added:
2022-09-08
Due Date:
2022-09-29
Last Updated:
June 21, 2025

Vulnerability Name

Oracle WebLogic Server Unspecified Vulnerability

Description

Oracle WebLogic Server contains an unspecified vulnerability which can allow an unauthenticated attacker with T3 network access to compromise the server.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

Apply updates per vendor instructions.

Additional Notes

  • https://www.oracle.com/security-alerts/cpuapr2018.html
  • https://nvd.nist.gov/vuln/detail/CVE-2018-2628

Related Weaknesses

browse all CVEs