Remote Code Execution Vulnerability in Oracle WebLogic Server by Oracle
CVE-2020-14882

9.8CRITICAL

Key Information:

Vendor: Oracle
Status: Weblogic Server
Vendor: CVE Published:; 21 October 2020

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 99%🦅 CISA Reported

What is CVE-2020-14882?

A vulnerability exists in Oracle WebLogic Server's Console component that allows for unauthorized remote code execution. An unauthenticated attacker with network access via HTTP can exploit this flaw, potentially leading to a complete takeover of the affected server instances. This issue affects several versions of WebLogic Server, making it critical for organizations using the software to prioritize security updates and verify their configurations to ensure protection against potential exploits.

CISA has reported CVE-2020-14882

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2020-14882 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply updates per vendor instructions.

Affected Version(s)

WebLogic Server 10.3.6.0.0

WebLogic Server 12.1.3.0.0

WebLogic Server 12.2.1.3.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

exphub
Created by zhzyker

CVE-2020-14882
Created by jas502n

CVE-2020-14882_ALL
Created by GGyao