Description
CVE-2019-2891中，未经授权的攻击者可以通过精心构造的HTTP请求向Console组件发起请求，从而接管WebLogic服务器。CVE-2019-2890中，未经授权的攻击者则通过构造T3协议请求，绕过WebLoig的反序列化黑名单，从而接管WebLogic服务器。
Oracle WebLogic Server 组件反序列化远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.oracle.com/security-alerts/alert-cve-2019-2725.html
https://www.cnblogs.com/pursue-security/p/17029495.html
https://cloud.tencent.com/developer/article/2168615
https://zone.ci/aliyun/ali_highrisk/12320.html
https://www.h3c.com/cn/d_201807/1095276_30003_0.htm
https://nic.tiangong.edu.cn/2020/0320/c236a52038/page.htm
https://github.com/Threekiii/Awesome-POC/blob/master/%E4%B8%AD%E9%97%B4%E4%BB%B6%E6%BC%8F%E6%B4%9E/Weblogic%20WLS%20Core%20Components%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2018-2628.md
https://www.secrss.com/articles/3988
https://www.tenable.com/plugins/nessus/126262