CVE Watch—

CVE-2020-2883

Oracle WebLogic Server Unspecified Vulnerability

CVSS

—

No CVSS

EPSS

94.9%

p100

KEV

YES

Jan 7, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

94.9%EPSS · 30 days94.9%

2026-09-162026-10-14

KEV catalog record

Product

Oracle / WebLogic Server

Vulnerability

Oracle WebLogic Server Unspecified Vulnerability

Added to KEV

Jan 7, 2025

Remediate by

Jan 28, 2025

Known ransomware use

Summary description

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://www.oracle.com/security-alerts/cpuapr2020.html ; https://nvd.nist.gov/vuln/detail/CVE-2020-2883

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2019-27259.8 CRI

100.0%

KEV—80Oracle WebLogic Server, Injection14d CVE-2017-102717.5 HIG

100.0%

KEV—80Oracle Corporation WebLogic Server Remote Code Execution Vulnerability63d CVE-2020-14882—

100.0%

KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2018-2628—

100.0%

KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2023-21839—

100.0%

KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2020-14750—

99.9%

KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—