CVE-2019-2725

ENISA EUVD: EUVD-2019-12364 ↗
Exploited in the Wild ✓ Confirmed 0-Day
Triaged: March 5, 2026 5 articles
VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24
94.47%
probability
This CVE has a 94.47% probability of being exploited in the next 30 days.
0% Top 100.0th percentile of all CVEs 100%

CVSS v3.0

Source: NVD
7.5
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Exploits & PoC

lufeirider/CVE-2019-2725

CVE-2019-2725 命令回显

435
SkyBlueEternal/CNVD-C-2019-48814-CNNVD-201904-961

CVE-2019-2725poc汇总 更新绕过CVE-2017-10271补丁POC

105
black-mirror/Weblogic

Weblogic CVE-2019-2725 CVE-2019-2729 Getshell 命令执行

70
pimps/CVE-2019-2725

WebLogic Insecure Deserialization - CVE-2019-2725 payload builder & exploit

52
lasensio/cve-2019-2725

PoC CVE-2019-2725 — lasensio/cve-2019-2725

21
tobechenghuai/CNTA-2019-0014xCVE-2019-2725

PoC CVE-2019-2725 — tobechenghuai/CNTA-2019-0014xCVE-2019-2725

11
zhusx110/cve-2019-2725

PoC CVE-2019-2725 — zhusx110/cve-2019-2725

7
7 repos — triés par ⭐ Rechercher sur GitHub ↗

Signal Intelligence

Confidenceⓘ
85%
EPSS 94.47%
CVSS v3.0 7.5
Mentions 5
Last Seen Sep 04, 2023

CNA Information

Analyst Note

CVE-2019-2725 is explicitly labeled as a 0-day in the CERT-EU Security Advisory 2019-010. The vulnerability in Oracle WebLogic Server was disclosed and exploited in the wild in April 2019, with active attacks documented before patches were widely available. The high CVSS score (7.5) and unauthenticated network exploitation capability support the severity and real-world exploitation risk.

Threat Actors 1

APT 29
apt_group Information theft and espionage 🇷🇺 RU

Triage Info

Decided atMar 05, 2026