References https://nvd.nist.gov/vuln/detail/CVE-2018-2894 https://github.com/vulhub/vulhub/blob/master/weblogic/CVE-2018-2894/README.md https://github.com/Threekiii/Awesome-POC/blob/master/%E4%B8%AD%E9%97%B4%E4%BB%B6%E6%BC%8F%E6%B4%9E/Weblogic%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E%20CVE-2018-2894.md https://developer.aliyun.com/article/666670 https://www.cnblogs.com/pursue-security/p/17029519.html https://zhuanlan.zhihu.com/p/655860770 https://www.anquanke.com/post/id/152823 https://cloud.tencent.com/developer/article/1670140 https://github.com/LandGrey/CVE-2018-2894 https://avd.aliyun.com/detail?id=AVD-2018-2894
Related VulnerabilitiesWebLogic Server Proxy Plug-in 存在远程命令执行漏洞(CVE-2026-21962)PoCCVE-2021-2135: Oracle WebLogic Server - Remote Code Executionweblogic-ssrf: weblogic ssrfWeblogic uddiexplorer 服务端请求伪造漏洞(CVE-2014-4210)PoCCVE-2014-4210: Oracle Weblogic - Server-Side Request ForgeryPoCCVE-2017-10271: Oracle WebLogic Server - Remote Command ExecutionPoCCVE-2017-3506: Oracle Fusion Middleware Weblogic Server - Remote OS Command ExecutionPoCCVE-2018-2894: Oracle WebLogic Server - Remote Code ExecutionPoCCVE-2019-2725: Oracle WebLogic Server - Remote Command ExecutionPoCCVE-2019-2729: Oracle WebLogic Server Administration Console - Remote Code ExecutionPoCCVE-2020-14750: Oracle WebLogic Server - Remote Command ExecutionPoCCVE-2020-14882: Oracle Weblogic Server - Remote Command Execution