CVE-2019-2725

CWE-74

Critical

103.8

RPS

Description

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Source: NVD

CVSS: 9.8; Critical · v3.1
EPSS: 99.96%; Probability of exploitation in the next 30 days (FIRST)
CISA KEV: In CISA KEV since Jan 2022
Fix commit: No known fix commit; Sources: MoreFixes, FreshFixes
Weakness: CWE-74
Published: 26 Apr 2019; Last modified 1 Oct 2026

How to read these signals: RPS · EPSS · CISA KEV · Data sources

Get this score from the API

curl -H "Authorization: Bearer dsec_live_xxxxxxxx" \
  https://api.intelligence.devsecure.io/api/v1/rps/CVE-2019-2725

Replace the placeholder with your key. Get a free API key or rank your own CVEs.

Data as of 7 Oct 2026, 05:16 UK time

CVE-2019-2725

Description

Signals

Get this score from the API