CVE Watch—

CVE-2020-2883

Oracle WebLogic Server Unspecified Vulnerability

CVSS

—

Sem CVSS

EPSS

94.6%

p100

KEV

SIM

7 de jan. de 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

94.6%EPSS · 30 dias94.9%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Oracle / WebLogic Server

Vulnerabilidade

Oracle WebLogic Server Unspecified Vulnerability

Adicionado ao KEV

7 de jan. de 2025

Corrigir até

28 de jan. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an unspecified vulnerability exploitable by an unauthenticated attacker with network access via IIOP or T3.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.oracle.com/security-alerts/cpuapr2020.html ; https://nvd.nist.gov/vuln/detail/CVE-2020-2883

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2019-27259.8 CRÍ

100.0%

KEV—80Oracle WebLogic Server, Injection35d CVE-2017-102717.5 ALT

100.0%

KEV—80Oracle Corporation WebLogic Server Remote Code Execution Vulnerability85d CVE-2020-14882—

100.0%

KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—CVE-2018-2628—

100.0%

KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2023-21839—

100.0%

KEV—80Oracle WebLogic Server Unspecified Vulnerability—CVE-2020-14750—

99.9%

KEV—80Oracle WebLogic Server Remote Code Execution Vulnerability—