Vulnerabilitycritical

Easily exploitable RCE in Oracle WebLogic Server under attack (CVE-2020-14882)

Help Net Securityby @zeljkazorzNov 3, 2020 · 08:52 UTC (Nov 3, 2020)3 min read1 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2020-14882 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-14882 CVE-2020-14750

Tags: cve-2020-14882 cve-2020-14750 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-14750	Unauthenticated RCE in Oracle WebLogic Server Console (CVE-2020-14750)	9.8	99%	KEV	Nov 2, 2020 KEV Nov 3, 2021
CVE-2020-14882	Remote Code Execution in Oracle WebLogic Server	9.8	100%	KEVPoC ×3	Oct 21, 2020 KEV Nov 3, 2021

From the original article

3 min read at helpnetsecurity.com

A critical and easily exploitable remote code execution vulnerability (CVE-2020-14882) in Oracle WebLogic Server is being targeted by attackers, SANS ISC has warned . Oracle WebLogic is a Java EE application server that is part of Oracle’s Fusion Middleware portfolio and supports a variety of popular databases.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.