Oracle on Tuesday unveiled its quarterly Crucial Patch Update for July 2021 with 342 fixes spanning across many goods, some of which could be exploited by a remote attacker to choose management of an impacted process.
Chief among them is CVE-2019-2729, a essential deserialization vulnerability via XMLDecoder in Oracle WebLogic Server World wide web Services that is remotely exploitable without having authentication. It is value noting that the weak point was originally addressed as element of an out-of-band safety update in June 2019.
Oracle WebLogic Server is an software server that features as a platform for producing, deploying, and working business Java-based mostly apps.
The flaw, which is rated 9.8 out of a greatest of 10 on the CVSS severity scale, impacts WebLogic Server variations 184.108.40.206 and 11.2.5. and exists within just the Oracle Hyperion Infrastructure Technologies.
Also set in WebLogic Server are six other flaws, three of which have been assigned a CVSS score of 9.8 out of 10 —
This is far from the 1st time essential difficulties have been uncovered in WebLogic Server. Earlier this year, Oracle transported the April 2021 patch with fixes for two bugs (CVE-2021-2135 and CVE-2021-2136), amid other folks that could be abused to execute arbitrary code.
Oracle customers are recommended to shift swiftly to use the updates and safeguard programs against probable exploitation.