Exploit for Weblogic

CVE-2019-2725 CVE-2019-2729

kitploit · 2026-08-25

Description

WebLogic CVE-2019-2725/2729 PoC enables command execution and output retrieval.

Affected software

Oracle Agile Product Lifecycle Management= 9.3.3, 9.3.4, 9.3.5

Oracle Communications Converged Application Server= 5.1, 7.0, 7.1

Oracle Peoplesoft Enterprise Peopletools= 8.56, 8.57, 8.58

Oracle Storagetek Tape Analytics Sw Tool= 2.3

All known vulnerabilities by product

Alt Linux Oracle Weblogic Server Virtualbox

CVSS Score

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Exploit Details

Modified:2026-08-25 15:47

Last Seen:2026-08-26 03:11

Reporter:KitPloit

Tags

WebLogiccommand executionCVE-2019-2725CVE-2019-2729Python PoCbatch exploitation

Other exploits for the same CVE

weblogic_2019_2725_wls_batch

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

CVE-2019-2725-POC

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-BLACK-MIRROR-WEBLOGIC
weblogic CVE-2019-2725 CVE-2019-2729 POC Выполнить команду и показать результат

использование: Одиночная цель python3 weblogic_get_webshell.py http://url Пакетные цели, поместите URL-адреса в url_list.txt python3 weblogic_get_webshell.py all