{"vulnerability": "CVE-2018-2628", "sightings": [{"uuid": "8d29226f-0bb3-4430-9344-a6978e8d4d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:43.000000Z"}, {"uuid": "0d4bfbc2-c24d-4844-823a-eb869d0a1ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "seen", "source": "Telegram/ihuTRC90RErb3CL1HvTQ4uawCD94jz-50uuVFsCaKtCvSVSf", "content": "", "creation_timestamp": "2025-01-28T03:22:55.000000Z"}, {"uuid": "b67db39d-aef4-450a-b99d-a1c1dddf36c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "published-proof-of-concept", "source": "Telegram/zaWOloGTmuxgYwScvhSZBdX4Ig42r1BJF11flVCmJ6M5QnQ", "content": "", "creation_timestamp": "2026-01-07T21:00:04.000000Z"}, {"uuid": "c9fc6101-a24a-43a6-8574-af94c37423a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "exploited", "source": "https://t.me/antichat/1326", "content": "Oracle  Weblogic Server (10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3) Deserialization  Remote Command Execution Vulnerability (CVE-2018-2628).  https://github.com/brianwrf/CVE-2018-2628", "creation_timestamp": "2018-04-26T06:28:24.000000Z"}, {"uuid": "c233017b-7120-4bef-aa73-b5ec3a1c75ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "seen", "source": "https://t.me/arpsyndicate/1050", "content": "#ExploitObserverAlert\n\nCVE-2018-2628\n\nDESCRIPTION: Exploit Observer has 114 entries related to CVE-2018-2628. Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\n\nFIRST-EPSS: 0.975090000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-03T22:57:39.000000Z"}, {"uuid": "0b0daded-3809-4cd0-a917-de0e83a28c25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "seen", "source": "https://t.me/SecLabNews/2104", "content": "\u0410\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2018-2628) \u0432 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebLogic \u2013 WLS. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432 9,8 \u0431\u0430\u043b\u043b\u0430 \u0438\u0437 10, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 WebLogic.\nhttps://www.securitylab.ru/news/493021.php", "creation_timestamp": "2018-04-30T13:37:11.000000Z"}, {"uuid": "762bc4b8-4c43-47e9-acd2-18a39740fd4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/1437", "content": "2018-04-30 | Bypass for CVE-2018-2628, Certificate Transparency logging is now mandatory, and Blue team can have fun too\nhttps://www.hackerone.com/zerodaily/2018-04-30", "creation_timestamp": "2018-04-30T19:26:03.000000Z"}, {"uuid": "5bcee182-f7bf-4dae-920d-fc2103c7c166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971702", "content": "", "creation_timestamp": "2024-12-24T20:33:00.330569Z"}, {"uuid": "24448efe-dd9c-4138-925b-61c7d44bfbb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "163e62d5-0d39-408d-b8cf-ef995d78db57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:07.000000Z"}, {"uuid": "392cd99a-641f-421d-b910-52f0fbb7723d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0c58a18b-b792-474a-861b-35c44b12d961", "content": "", "creation_timestamp": "2026-02-02T12:27:14.271218Z"}, {"uuid": "8bb6f329-66a2-418b-b340-350ded4c9273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "published-proof-of-concept", "source": "https://t.me/v3n0mhack/301", "content": "https://github.com/sp4zcmd/WeblogicExploit-GUI\nWeblogic\u6f0f\u6d1e\u5229\u7528\u56fe\u5f62\u5316\u5de5\u5177\n\nCVE-2020-2551\nCVE-2020-2555\nCVE-2020-2883\nCVE-2016-3510\nCVE-2016-0638\nCVE-2017-10271\nJdk7u21\nCVE-2017-3248\uff08JRMP\uff09\nCVE-2018-2628\uff08JRMP\uff09\nCVE-2018-2893\uff08JRMP\uff09\nCVE-2018-3245\uff08JRMP\uff09\nCVE-2018-3181\uff08JNDI\uff09\nCVE-2020-14882\u672a\u6388\u6743\u8bbf\u95ee+CVE-2021-2109\uff08JNDI\uff09", "creation_timestamp": "2023-11-11T07:49:11.000000Z"}, {"uuid": "6c384535-e989-441f-8d65-d870e2a2abff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "published-proof-of-concept", "source": "https://t.me/HackerOne/1889", "content": "https://github.com/brianwrf/CVE-2018-2628", "creation_timestamp": "2018-04-20T20:11:37.000000Z"}, {"uuid": "b0e85189-dc2f-44ca-802e-c09e8158984e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1479", "content": "https://github.com/sp4zcmd/WeblogicExploit-GUI\nWeblogic\u6f0f\u6d1e\u5229\u7528\u56fe\u5f62\u5316\u5de5\u5177\n\nCVE-2020-2551\nCVE-2020-2555\nCVE-2020-2883\nCVE-2016-3510\nCVE-2016-0638\nCVE-2017-10271\nJdk7u21\nCVE-2017-3248\uff08JRMP\uff09\nCVE-2018-2628\uff08JRMP\uff09\nCVE-2018-2893\uff08JRMP\uff09\nCVE-2018-3245\uff08JRMP\uff09\nCVE-2018-3181\uff08JNDI\uff09\nCVE-2020-14882\u672a\u6388\u6743\u8bbf\u95ee+CVE-2021-2109\uff08JNDI\uff09\n\n#github #tools #exploit", "creation_timestamp": "2023-11-10T15:34:11.000000Z"}, {"uuid": "2d81e198-8910-462b-b79a-d5321639124e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "1839647d-c2c4-4df2-99aa-6deb9cb37b06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "exploited", "source": "https://www.exploit-db.com/exploits/44553", "content": "", "creation_timestamp": "2018-04-22T00:00:00.000000Z"}, {"uuid": "38d5b458-1161-4bc5-b781-4290171615d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "exploited", "source": "https://www.exploit-db.com/exploits/45193", "content": "", "creation_timestamp": "2018-08-13T00:00:00.000000Z"}, {"uuid": "bd85aa0a-d055-4f32-83b4-f062f85795c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogic_deserialize.rb", "content": "", "creation_timestamp": "2018-08-30T11:20:03.000000Z"}, {"uuid": "ca6ee755-48ee-42f9-b045-3efd22a1436d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:59.000000Z"}, {"uuid": "59a9b04d-bc2e-4bcb-b057-5d534660b59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0c58a18b-b792-474a-861b-35c44b12d961", "content": "", "creation_timestamp": "2026-02-02T12:27:14.271218Z"}, {"uuid": "b559bad9-77ee-4506-adf6-0d2c91ae47fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/1317", "content": "https://github.com/0xn0ne/weblogicScanner\n\nweblogic\nCVE-2014-4210,\nCVE-2016-0638/3510,\nCVE-2017-3248/3506/10271,\nCVE-2018-2628/2893/2894/3191/3245/3252, CVE-2019-2618/2725/2729/2890, CVE-2020-2551)", "creation_timestamp": "2024-07-18T20:18:18.000000Z"}, {"uuid": "9cfdc655-2035-4d2f-afe0-ea4226400390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "published-proof-of-concept", "source": "https://t.me/realLulzSec/13943", "content": "https://github.com/0xn0ne/weblogicScanner\n\nweblogic\nCVE-2014-4210,\nCVE-2016-0638/3510,\nCVE-2017-3248/3506/10271,\nCVE-2018-2628/2893/2894/3191/3245/3252, CVE-2019-2618/2725/2729/2890, CVE-2020-2551)", "creation_timestamp": "2024-07-18T20:18:18.000000Z"}, {"uuid": "748dffad-d6fb-41ec-806c-9490fe840326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2807", "content": "https://github.com/0xn0ne/weblogicScanner\n\nweblogic \u6f0f\u6d1e\u626b\u63cf\u5de5\u5177\u3002\u76ee\u524d\u5305\u542b\u5bf9\u4ee5\u4e0b\u6f0f\u6d1e\u7684\u68c0\u6d4b\u80fd\u529b\uff1a\nCVE-2014-4210,\nCVE-2016-0638/3510,\nCVE-2017-3248/3506/10271,\nCVE-2018-2628/2893/2894/3191/3245/3252, CVE-2019-2618/2725/2729/2890, CVE-2020-2551)\n\n#github #tools #exploit", "creation_timestamp": "2024-07-18T16:40:25.000000Z"}, {"uuid": "0e728c7a-0044-411a-9645-05163c9ba9e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1491", "content": "#tools\n#Blue_Team_Techniques\nWeb-Logic Exploit Scanner\n(weblogic administrator console,\nCVE-2014-4210,\nCVE-2016-0638/3510,\nCVE-2017-3248/3506/10271,\nCVE-2018-2628/2893/2894/3191/3245/3252, CVE-2019-2618/2725/2729/2890, CVE-2020-2551)\nhttps://github.com/0xn0ne/weblogicScanner", "creation_timestamp": "2024-10-11T14:40:45.000000Z"}, {"uuid": "fb9d007a-1de2-4866-92d5-68c151f302d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "seen", "source": "MISP/5df74123-1020-46ef-9504-7c5c0a3b4631", "content": "", "creation_timestamp": "2019-12-16T08:33:51.000000Z"}, {"uuid": "8bfe2470-0b61-4da2-8b8f-1c007b94b7ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-2628", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:19.000000Z"}]}