CVE Watch—

CVE-2020-14644

Oracle WebLogic Server Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

94.5%

p100

KEV

SIM

18 de set. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

94.5%EPSS · 30 dias94.5%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Oracle / WebLogic Server

Vulnerabilidade

Oracle WebLogic Server Remote Code Execution Vulnerability

Adicionado ao KEV

18 de set. de 2024

Corrigir até

9 de out. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains a deserialization vulnerability. Unauthenticated attackers with network access via T3 or IIOP can exploit this vulnerability to achieve remote code execution.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.oracle.com/security-alerts/cpujul2020.html ; https://nvd.nist.gov/vuln/detail/CVE-2020-14644

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2019-27259.8 CRÍ

100.0%

KEV—80Oracle WebLogic Server, Injection35d CVE-2017-102717.5 ALT

100.0%

KEV—80Oracle Corporation WebLogic Server Remote Code Execution Vulnerability85d CVE-2020-14882—

100.0%

KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2018-2628—

100.0%

KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2023-21839—

100.0%

KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2020-14750—

99.9%

KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—