Vulnerabilitycritical

Hackers are targeting recently patched WebLogic security vulnerability

Security Affairsby @securityaffairsMay 1, 2020 · 17:26 UTC (May 1, 2020)2 min read2

Read at securityaffairs.com

Analyze CVE-2020-2883 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-2883 CVE-2019-2729

Tags: cve-2020-2883 cve-2019-2729 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-2729	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent	9.8	89%	PoC	Jun 19, 2019
CVE-2020-2883	Unauthenticated RCE in Oracle WebLogic Server via T3/IIOP	9.8	95%	KEV	Apr 15, 2020 KEV Jan 7, 2025

From the original article

2 min read at securityaffairs.com

Oracle warns of attacks against recently patched WebLogic security bug Oracle warns of attacks in the wild exploiting a recently patched vulnerability in WebLogic servers for which a PoC code is available on GitHub. IT giant Oracle published a security alert to warn organizations running WebLogic servers of ongoing attacks that exploit the CVE-2020-2883 vulnerability.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.