Back to the CVE list
CVE-2019-2725 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

Vulnerability in Oracle Corporation Tape Library ACSLS

CVSS score

7.5

EPSS probability

%100.0

Risk score

15.0

Published

7 y ago

OverviewPublic Exploits (9)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
loursha/Oracle-Weblogic-Server-AsyncResponseService-Deserialization-Remote-Code-Execution-CVE-2019-2725
GitHub

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server.

Public PoCSource updated: 19.01.2026 19:20:48
G
CalegariMindSec/Exploit-CVE-2019-2725
GitHub

A simple exploit for CVE-2019-2725.

Public PoCSource updated: 10.01.2024 19:35:11
G
lufeirider/CVE-2019-2725
GitHub

CVE-2019-2725 命令回显

Public PoCSource updated: 30.09.2026 01:29:13
G
1stPeak/CVE-2019-2725-environment
GitHub

1stPeak/CVE-2019-2725-environment

Public PoCSource updated: 16.07.2021 07:14:53
G
ludy-dev/Oracle-WLS-Weblogic-RCE
GitHub

(CVE-2019-2725) Oracle WLS(Weblogic) RCE test sciript

Public PoCSource updated: 15.04.2026 12:56:38
G
N0b1e6/CVE-2019-2725-POC
GitHub

CVE-2019-2725-POC

Public PoCSource updated: 12.12.2019 03:11:14
E
Oracle Weblogic Server - 'AsyncResponseService' Deserialization Remote Code Execution (Metasploit)
Exploit-DB

Oracle Weblogic Server - 'AsyncResponseService' Deserialization Remote Code Execution (Metasploit)

Exploit referenceSource updated: 08.05.2019 00:00:00
E
Oracle Weblogic 10.3.6.0.0 / 12.1.3.0.0 - Remote Code Execution
Exploit-DB

Oracle Weblogic 10.3.6.0.0 / 12.1.3.0.0 - Remote Code Execution

Exploit referenceSource updated: 30.04.2019 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2725.yaml
Nuclei

Nuclei: Oracle WebLogic Server - Remote Command Execution

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2019-2725"