Exploit for CVE-2018-2894

kitploit · 2026-08-25

Description

WebLogic unauthorized access allows arbitrary file upload leading to remote code execution.

Affected Oracle Weblogic Server versions

Oracle Weblogic Server= 10.3.6.0.0, 12.1.3.0.0, 12.2.1.2.0, 12.2.1.3

All known vulnerabilities by product

Oracle Weblogic Server

CVSS 9.8 for CVE-2018-2894

9.8

HIGH SEVERITY

Version 3.0

VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-25 04:28

Last Seen:2026-08-26 03:01

Reporter:KitPloit

Tags

WebLogicunauthorized accessarbitrary file uploadremote code executioncheck script

Other exploits for CVE-2018-2894

2026-08-28 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

weblogicScanner

2026-08-26 KitPloitKITPLOIT

Exploit for CVE-2018-2894

2024-08-18 yijingsecGITEE

Exploit for CVE-2018-2894

2020-10-05 0xdawnGITEE

Exploit for CVE-2018-2894

2020-10-05 0xdawnGITEE

Exploit for CVE-2018-2894

2020-10-05 0xdawnGITEE

Exploit for CVE-2018-2894

2019-11-19 k8gegeGITHUB

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-LANDGREY-CVE-2018-2894
# CVE-2018-2894

**CVE-2018-2894** (WebLogic: неавторизованный доступ, загрузка произвольных файлов/RCE уязвимость) проверочный скрипт.

![poc](https://assets.kitploit.com/production/public/readmes/37455/ec87ebb2a8ae61f88863970270da684cb96b9f6d372384e13c0ab646131dd58e.png)