{"metadata": {"vulnerability": "CVE-2018-2628", "count": 63, "kinds": {"milestone": 4, "sighting": 31, "kev": 11, "other": 17}, "linked_omitted": 0}, "data": [{"timestamp": "2017-12-15T00:00:00Z", "date_only": false, "value": "2017-12-15T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2018-2628", "field": "cveMetadata.dateReserved"}, {"timestamp": "2018-03-27T00:00:00Z", "date_only": false, "value": "2018-03-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / oracle", "record": "CVE-2018-2628", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2018-04-18T00:00:00Z", "date_only": true, "value": "2018-04-18", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2018-07811", "record": "CNVD-2018-07811", "field": "openTime", "linked_record": true}, {"timestamp": "2018-04-18T00:00:00Z", "date_only": true, "value": "2018-04-18", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2018-07811", "record": "CNVD-2018-07811", "field": "submitTime", "linked_record": true}, {"timestamp": "2018-04-19T02:00:00Z", "date_only": false, "value": "2018-04-19T02:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2018-2628", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2018-04-19T02:29:00Z", "date_only": false, "value": "2018-04-19T02:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-882J-M7WV-38P6", "record": "GHSA-882J-M7WV-38P6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2018-04-19T02:29:00Z", "date_only": false, "value": "2018-04-19T02:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2018-2628", "record": "GSD-2018-2628", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2018-04-19T02:29:00.457Z", "date_only": false, "value": "2018-04-19T02:29:00.457", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-2628", "record": "FKIE_CVE-2018-2628", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2018-04-20T20:11:37Z", "date_only": false, "value": "2018-04-20T20:11:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerOne/1889", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "6c384535-e989-441f-8d65-d870e2a2abff", "content": "https://github.com/brianwrf/CVE-2018-2628", "url": "https://t.me/HackerOne/1889", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2018-04-22T00:00:00Z", "date_only": false, "value": "2018-04-22T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/44553", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "1839647d-c2c4-4df2-99aa-6deb9cb37b06", "url": "https://www.exploit-db.com/exploits/44553", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2018-04-26T06:28:24Z", "date_only": false, "value": "2018-04-26T06:28:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/antichat/1326", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "c9fc6101-a24a-43a6-8574-af94c37423a9", "content": "Oracle  Weblogic Server (10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3) Deserialization  Remote Command Execution Vulnerability (CVE-2018-2628).  https://github.com/brianwrf/CVE-2018-2628", "url": "https://t.me/antichat/1326", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2018-04-30T13:37:11Z", "date_only": false, "value": "2018-04-30T13:37:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/SecLabNews/2104", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "0b0daded-3809-4cd0-a917-de0e83a28c25", "content": "\u0410\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2018-2628) \u0432 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u043c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 WebLogic \u2013 WLS. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432 9,8 \u0431\u0430\u043b\u043b\u0430 \u0438\u0437 10, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 WebLogic.\nhttps://www.securitylab.ru/news/493021.php", "url": "https://t.me/SecLabNews/2104"}, {"timestamp": "2018-04-30T19:26:03Z", "date_only": false, "value": "2018-04-30T19:26:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/1437", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "762bc4b8-4c43-47e9-acd2-18a39740fd4a", "content": "2018-04-30 | Bypass for CVE-2018-2628, Certificate Transparency logging is now mandatory, and Blue team can have fun too\nhttps://www.hackerone.com/zerodaily/2018-04-30", "url": "https://t.me/thebugbountyhunter/1437", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2018-08-13T00:00:00Z", "date_only": false, "value": "2018-08-13T00:00:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://www.exploit-db.com/exploits/45193", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "38d5b458-1161-4bc5-b781-4290171615d8", "url": "https://www.exploit-db.com/exploits/45193", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2018-08-30T11:20:03Z", "date_only": false, "value": "2018-08-30T11:20:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogic_deserialize.rb", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "bd85aa0a-d055-4f32-83b4-f062f85795c7", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/weblogic_deserialize.rb"}, {"timestamp": "2019-03-08T10:57:01Z", "date_only": false, "value": "2019-03-08T10:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / oracle", "record": "CVE-2018-2628", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2019-04-29T21:01:00Z", "date_only": false, "value": "2019-04-29T21:01Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2018-2628", "record": "GSD-2018-2628", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2019-12-16T08:33:51Z", "date_only": false, "value": "2019-12-16T08:33:51.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/5df74123-1020-46ef-9504-7c5c0a3b4631", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "fb9d007a-1de2-4866-92d5-68c151f302d4"}, {"timestamp": "2022-05-14T01:06:14Z", "date_only": false, "value": "2022-05-14T01:06:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-882J-M7WV-38P6", "record": "GHSA-882J-M7WV-38P6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-09-08T00:00:00Z", "date_only": false, "value": "2022-09-08T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2018-2628", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0c58a18b-b792-474a-861b-35c44b12d961", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-08T00:00:00Z", "date_only": false, "value": "2022-09-08T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2018-2628", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "305fd1d1-a4d8-47e4-af26-7d456687d8e9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-08T00:00:00Z", "date_only": true, "value": "2022-09-08", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2018-2628", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-09-08T00:00:00Z", "date_only": false, "value": "2022-09-08T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2018-2628", "field": "evidence.0.details.added_date", "uuid": "305fd1d1-a4d8-47e4-af26-7d456687d8e9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-08T00:00:00Z", "date_only": true, "value": "2022-09-08", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2018-2628", "field": "evidence.0.details.date_added", "uuid": "0c58a18b-b792-474a-861b-35c44b12d961", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-08T00:00:00Z", "date_only": false, "value": "2022-09-08T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2018-2628", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "0c58a18b-b792-474a-861b-35c44b12d961", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-08T00:00:00Z", "date_only": false, "value": "2022-09-08T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2018-2628", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "305fd1d1-a4d8-47e4-af26-7d456687d8e9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-08T00:00:00Z", "date_only": false, "value": "2022-09-08T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2018-2628", "field": "status.status_updated_at", "uuid": "0c58a18b-b792-474a-861b-35c44b12d961", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-08T00:00:00Z", "date_only": false, "value": "2022-09-08T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2018-2628", "field": "status.status_updated_at", "uuid": "305fd1d1-a4d8-47e4-af26-7d456687d8e9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-09-08T00:00:00Z", "date_only": false, "value": "2022-09-08T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2018-2628", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2018-2628 added to CISA KEV"}, {"timestamp": "2022-09-29T00:00:00Z", "date_only": true, "value": "2022-09-29", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2018-2628", "field": "evidence.0.details.due_date", "uuid": "0c58a18b-b792-474a-861b-35c44b12d961", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-14T21:10:03Z", "date_only": false, "value": "2023-06-14T21:10:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "2d81e198-8910-462b-b79a-d5321639124e"}, {"timestamp": "2023-11-10T15:34:11Z", "date_only": false, "value": "2023-11-10T15:34:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1479", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "b0e85189-dc2f-44ca-802e-c09e8158984e", "content": "https://github.com/sp4zcmd/WeblogicExploit-GUI\nWeblogic\u6f0f\u6d1e\u5229\u7528\u56fe\u5f62\u5316\u5de5\u5177\n\nCVE-2020-2551\nCVE-2020-2555\nCVE-2020-2883\nCVE-2016-3510\nCVE-2016-0638\nCVE-2017-10271\nJdk7u21\nCVE-2017-3248\uff08JRMP\uff09\nCVE-2018-2628\uff08JRMP\uff09\nCVE-2018-2893\uff08JRMP\uff09\nCVE-2018-3245\uff08JRMP\uff09\nCVE-2018-3181\uff08JNDI\uff09\nCVE-2020-14882\u672a\u6388\u6743\u8bbf\u95ee+CVE-2021-2109\uff08JNDI\uff09\n\n#github #tools #exploit", "url": "https://t.me/CNArsenal/1479", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-11T07:49:11Z", "date_only": false, "value": "2023-11-11T07:49:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/v3n0mhack/301", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "8bb6f329-66a2-418b-b340-350ded4c9273", "content": "https://github.com/sp4zcmd/WeblogicExploit-GUI\nWeblogic\u6f0f\u6d1e\u5229\u7528\u56fe\u5f62\u5316\u5de5\u5177\n\nCVE-2020-2551\nCVE-2020-2555\nCVE-2020-2883\nCVE-2016-3510\nCVE-2016-0638\nCVE-2017-10271\nJdk7u21\nCVE-2017-3248\uff08JRMP\uff09\nCVE-2018-2628\uff08JRMP\uff09\nCVE-2018-2893\uff08JRMP\uff09\nCVE-2018-3245\uff08JRMP\uff09\nCVE-2018-3181\uff08JNDI\uff09\nCVE-2020-14882\u672a\u6388\u6743\u8bbf\u95ee+CVE-2021-2109\uff08JNDI\uff09", "url": "https://t.me/v3n0mhack/301", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-03T22:57:39Z", "date_only": false, "value": "2023-12-03T22:57:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1050", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "c233017b-7120-4bef-aa73-b5ec3a1c75ee", "content": "#ExploitObserverAlert\n\nCVE-2018-2628\n\nDESCRIPTION: Exploit Observer has 114 entries related to CVE-2018-2628. Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).\n\nFIRST-EPSS: 0.975090000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1050"}, {"timestamp": "2023-12-13T01:22:32.307Z", "date_only": false, "value": "2023-12-13T01:22:32.307963Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2018-2628", "record": "GSD-2018-2628", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-07-18T16:40:25Z", "date_only": false, "value": "2024-07-18T16:40:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/2807", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "748dffad-d6fb-41ec-806c-9490fe840326", "content": "https://github.com/0xn0ne/weblogicScanner\n\nweblogic \u6f0f\u6d1e\u626b\u63cf\u5de5\u5177\u3002\u76ee\u524d\u5305\u542b\u5bf9\u4ee5\u4e0b\u6f0f\u6d1e\u7684\u68c0\u6d4b\u80fd\u529b\uff1a\nCVE-2014-4210,\nCVE-2016-0638/3510,\nCVE-2017-3248/3506/10271,\nCVE-2018-2628/2893/2894/3191/3245/3252, CVE-2019-2618/2725/2729/2890, CVE-2020-2551)\n\n#github #tools #exploit", "url": "https://t.me/CNArsenal/2807", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-18T20:18:18Z", "date_only": false, "value": "2024-07-18T20:18:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/1317", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "b559bad9-77ee-4506-adf6-0d2c91ae47fa", "content": "https://github.com/0xn0ne/weblogicScanner\n\nweblogic\nCVE-2014-4210,\nCVE-2016-0638/3510,\nCVE-2017-3248/3506/10271,\nCVE-2018-2628/2893/2894/3191/3245/3252, CVE-2019-2618/2725/2729/2890, CVE-2020-2551)", "url": "https://t.me/realLulzSec/1317", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-18T20:18:18Z", "date_only": false, "value": "2024-07-18T20:18:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/realLulzSec/13943", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "9cfdc655-2035-4d2f-afe0-ea4226400390", "content": "https://github.com/0xn0ne/weblogicScanner\n\nweblogic\nCVE-2014-4210,\nCVE-2016-0638/3510,\nCVE-2017-3248/3506/10271,\nCVE-2018-2628/2893/2894/3191/3245/3252, CVE-2019-2618/2725/2729/2890, CVE-2020-2551)", "url": "https://t.me/realLulzSec/13943", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-05T04:21:34.557Z", "date_only": false, "value": "2024-08-05T04:21:34.557Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2018-2628", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-03T18:34:43.216Z", "date_only": false, "value": "2024-10-03T18:34:43.216162Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2018-2628", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-10-03T18:34:43.216Z", "date_only": false, "value": "2024-10-03T18:34:43.216162Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-2628", "record": "FKIE_CVE-2018-2628", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-10-11T14:40:45Z", "date_only": false, "value": "2024-10-11T14:40:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1491", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "0e728c7a-0044-411a-9645-05163c9ba9e5", "content": "#tools\n#Blue_Team_Techniques\nWeb-Logic Exploit Scanner\n(weblogic administrator console,\nCVE-2014-4210,\nCVE-2016-0638/3510,\nCVE-2017-3248/3506/10271,\nCVE-2018-2628/2893/2894/3191/3245/3252, CVE-2019-2618/2725/2729/2890, CVE-2020-2551)\nhttps://github.com/0xn0ne/weblogicScanner", "url": "https://t.me/CyberSecurityTechnologies/1491", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-24T20:33:00.330Z", "date_only": false, "value": "2024-12-24T20:33:00.330569Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971702", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "5bcee182-f7bf-4dae-920d-fc2103c7c166", "url": "https://feedsin.space/feed/CISAKevBot/items/2971702"}, {"timestamp": "2025-01-28T03:22:55Z", "date_only": false, "value": "2025-01-28T03:22:55.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ihuTRC90RErb3CL1HvTQ4uawCD94jz-50uuVFsCaKtCvSVSf", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "0d4bfbc2-c24d-4844-823a-eb869d0a1ae6"}, {"timestamp": "2025-02-06T03:13:43Z", "date_only": false, "value": "2025-02-06T03:13:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "24448efe-dd9c-4138-925b-61c7d44bfbb3"}, {"timestamp": "2025-02-23T02:10:19Z", "date_only": false, "value": "2025-02-23T02:10:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "8bfe2470-0b61-4da2-8b8f-1c007b94b7ee"}, {"timestamp": "2025-02-23T04:10:07Z", "date_only": false, "value": "2025-02-23T04:10:07.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "163e62d5-0d39-408d-b8cf-ef995d78db57"}, {"timestamp": "2025-08-31T03:00:59Z", "date_only": false, "value": "2025-08-31T03:00:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "ca6ee755-48ee-42f9-b045-3efd22a1436d"}, {"timestamp": "2025-08-31T03:12:43Z", "date_only": false, "value": "2025-08-31T03:12:43.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "8d29226f-0bb3-4430-9344-a6978e8d4d79"}, {"timestamp": "2025-10-21T23:45:51.974Z", "date_only": false, "value": "2025-10-21T23:45:51.974Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2018-2628", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:45:51.974Z", "date_only": false, "value": "2025-10-21T23:45:51.974Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2018-2628", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:35Z", "date_only": false, "value": "2025-10-22T00:31:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-882J-M7WV-38P6", "record": "GHSA-882J-M7WV-38P6", "field": "modified", "linked_record": true}, {"timestamp": "2026-01-07T21:00:04Z", "date_only": false, "value": "2026-01-07T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/zaWOloGTmuxgYwScvhSZBdX4Ig42r1BJF11flVCmJ6M5QnQ", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "b67db39d-aef4-450a-b99d-a1c1dddf36c5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-02T12:27:14.271Z", "date_only": false, "value": "2026-02-02T12:27:14.271218Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0c58a18b-b792-474a-861b-35c44b12d961", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "59a9b04d-bc2e-4bcb-b057-5d534660b59c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0c58a18b-b792-474a-861b-35c44b12d961", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T01:55:57.647Z", "date_only": false, "value": "2026-06-17T01:55:57.647", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-2628", "record": "FKIE_CVE-2018-2628", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:47:04.344Z", "date_only": false, "value": "2026-06-19T12:47:04.344646Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/20774fe2-6768-4ba7-ae2b-26cdea9d2058", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "3af7c06d-1087-4374-893f-356bd94b291c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/20774fe2-6768-4ba7-ae2b-26cdea9d2058", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2018-2628", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "305fd1d1-a4d8-47e4-af26-7d456687d8e9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:32.508Z", "date_only": false, "value": "2026-06-23T14:05:32.508591Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/305fd1d1-a4d8-47e4-af26-7d456687d8e9", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "600cf18f-6d58-4969-a894-e5131707fe2c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/305fd1d1-a4d8-47e4-af26-7d456687d8e9", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T03:00:05.300Z", "date_only": false, "value": "2026-09-03T03:00:05.300293Z", "kind": "sighting", "label": "Seen", "source": "Telegram/mTdAl69kQYNmN8ZbeHUpTeji-nFgbg7kT5XkeMcaNuMn6uI", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "7b0f2434-bd92-40ba-88a3-29f79bf4b041"}, {"timestamp": "2026-09-04T00:01:03.206Z", "date_only": false, "value": "2026-09-04T00:01:03.206132Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/mTdAl69kQYNmN8ZbeHUpTeji-nFgbg7kT5XkeMcaNuMn6uI", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "7f94d7ab-8b3a-427f-8a36-8bceff9ffb6f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-09T04:00:36.888Z", "date_only": false, "value": "2026-09-09T04:00:36.888375Z", "kind": "sighting", "label": "Seen", "source": "Telegram/r4oF1dd8S2eZHbzR9DOUSLFo4p2J6Y0ZlXzV9dEOlSgZGtc", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "1cca4657-3895-49e0-b5a7-861e630ecf57"}, {"timestamp": "2026-09-10T00:00:51.157Z", "date_only": false, "value": "2026-09-10T00:00:51.157120Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/r4oF1dd8S2eZHbzR9DOUSLFo4p2J6Y0ZlXzV9dEOlSgZGtc", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "1f585b9c-c785-454c-945d-4d826ffdbaa2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2018-2628", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "0c58a18b-b792-474a-861b-35c44b12d961", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T21:49:51.641Z", "anchors": {"origin": {"timestamp": "2018-03-27T00:00:00Z", "date_only": false, "value": "2018-03-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / oracle", "record": "CVE-2018-2628", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2018-03-27T00:00:00Z", "date_only": false, "value": "2018-03-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / oracle", "record": "CVE-2018-2628", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2018-04-20T20:11:37Z", "date_only": false, "value": "2018-04-20T20:11:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerOne/1889", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "6c384535-e989-441f-8d65-d870e2a2abff", "content": "https://github.com/brianwrf/CVE-2018-2628", "url": "https://t.me/HackerOne/1889", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2018-04-26T06:28:24Z", "date_only": false, "value": "2018-04-26T06:28:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/antichat/1326", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "c9fc6101-a24a-43a6-8574-af94c37423a9", "content": "Oracle  Weblogic Server (10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3) Deserialization  Remote Command Execution Vulnerability (CVE-2018-2628).  https://github.com/brianwrf/CVE-2018-2628", "url": "https://t.me/antichat/1326", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 2615304.0, "hours": 726.4733333333334, "days": 30.26972222222222, "min_seconds": 2528904.0, "max_seconds": 2615304.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-03-27T00:00:00Z", "date_only": false, "value": "2018-03-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / oracle", "record": "CVE-2018-2628", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2018-04-26T06:28:24Z", "date_only": false, "value": "2018-04-26T06:28:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/antichat/1326", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "c9fc6101-a24a-43a6-8574-af94c37423a9", "content": "Oracle  Weblogic Server (10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3) Deserialization  Remote Command Execution Vulnerability (CVE-2018-2628).  https://github.com/brianwrf/CVE-2018-2628", "url": "https://t.me/antichat/1326", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 2615304.0, "hours": 726.4733333333334, "days": 30.26972222222222, "min_seconds": 2528904.0, "max_seconds": 2615304.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-03-27T00:00:00Z", "date_only": false, "value": "2018-03-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / oracle", "record": "CVE-2018-2628", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2018-04-26T06:28:24Z", "date_only": false, "value": "2018-04-26T06:28:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/antichat/1326", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "c9fc6101-a24a-43a6-8574-af94c37423a9", "content": "Oracle  Weblogic Server (10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3) Deserialization  Remote Command Execution Vulnerability (CVE-2018-2628).  https://github.com/brianwrf/CVE-2018-2628", "url": "https://t.me/antichat/1326", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 2146297.0, "hours": 596.1936111111111, "days": 24.841400462962962, "min_seconds": 2059897.0, "max_seconds": 2146297.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-03-27T00:00:00Z", "date_only": false, "value": "2018-03-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / oracle", "record": "CVE-2018-2628", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2018-04-20T20:11:37Z", "date_only": false, "value": "2018-04-20T20:11:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerOne/1889", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "6c384535-e989-441f-8d65-d870e2a2abff", "content": "https://github.com/brianwrf/CVE-2018-2628", "url": "https://t.me/HackerOne/1889", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 272670591.641653, "hours": 75741.83101157028, "days": 3155.9096254820947, "min_seconds": 272584191.641653, "max_seconds": 272670591.641653, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-03-27T00:00:00Z", "date_only": false, "value": "2018-03-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / oracle", "record": "CVE-2018-2628", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T21:49:51.641Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 270055287.641653, "hours": 75015.35767823695, "days": 3125.639903259873, "min_seconds": 270055287.641653, "max_seconds": 270055287.641653, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-04-26T06:28:24Z", "date_only": false, "value": "2018-04-26T06:28:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/antichat/1326", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "c9fc6101-a24a-43a6-8574-af94c37423a9", "content": "Oracle  Weblogic Server (10.3.6.0, 12.1.3.0, 12.2.1.2, 12.2.1.3) Deserialization  Remote Command Execution Vulnerability (CVE-2018-2628).  https://github.com/brianwrf/CVE-2018-2628", "url": "https://t.me/antichat/1326", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T21:49:51.641Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 270524294.641653, "hours": 75145.63740045916, "days": 3131.068225019132, "min_seconds": 270524294.641653, "max_seconds": 270524294.641653, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-04-20T20:11:37Z", "date_only": false, "value": "2018-04-20T20:11:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerOne/1889", "record": "CVE-2018-2628", "field": "creation_timestamp", "uuid": "6c384535-e989-441f-8d65-d870e2a2abff", "content": "https://github.com/brianwrf/CVE-2018-2628", "url": "https://t.me/HackerOne/1889", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T21:49:51.641Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}