One of the most ubiquitous ransomware variants on the market, deployments of REvil first were observed on April 17, 2019, where attackers leveraged a vulnerability in Oracle WebLogic servers tracked as CVE-2019-2725.
Source dataSource dataCopied from an authoritative feed: NVD, CVE.org, CISA KEV, FIRST EPSS or MITRE CTID mappings, or labelled by the annotators of a published dataset. CTID attack_to_cve (Phase 1); claude-haiku-5-5: Unauthenticated HTTP exploitation of public-facing server; AnnoCTR expert entity-linking label (train split); ATT&CK ID T1190 written in the same sentence as CVE-2019-2725.MITRE CTID mapping of the CVE
One of the most ubiquitous ransomware variants on the market, deployments of REvil first were observed on April 17, 2019, where attackers leveraged a vulnerability in Oracle WebLogic servers tracked as CVE-2019-2725.