What’s Vulnerable › Vulnerabilities
CVE-2020-14750: Oracle WebLogic Server Remote Code Execution Vulnerability
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: yes — in CISA KEV since 2021-11-03
- EPSS: 99.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-11-02 · updated 2026-06-17
Description
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Summary
CVE-2020-14750 is an easily exploitable, unauthenticated remote code execution flaw in the Oracle WebLogic Server Console component of Oracle Fusion Middleware, allowing an attacker with HTTP network access to take over the server (CVSS 9.8). It affects supported versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The flaw is listed in CISA's Known Exploited Vulnerabilities catalog with active exploitation, a public exploit exists, and EPSS estimates a 99.2% probability of exploitation within 30 days. Apply the updates specified in Oracle's vendor instructions immediately; given active exploitation, prioritize patching internet-facing WebLogic instances.
CVE-2020-14750 ثغرة تنفيذ تعليمات برمجية عن بُعد سهلة الاستغلال في مكوّن Console ضمن Oracle WebLogic Server التابع لـ Oracle Fusion Middleware، وتتيح لمهاجم غير مصادَق لديه وصول شبكي عبر HTTP السيطرة الكاملة على الخادم (CVSS 9.8). تشمل الإصدارات المتأثرة 10.3.6.0.0 و12.1.3.0.0 و12.2.1.3.0 و12.2.1.4.0 و14.1.1.0.0. الثغرة مدرجة في كتالوج CISA للثغرات المعروفة بالاستغلال مع استغلال نشط، ويتوفر استغلال عام، وتقدّر EPSS احتمال الاستغلال خلال 30 يوماً بنسبة 99.2%. يجب تطبيق التحديثات الواردة في تعليمات Oracle فوراً، وإعطاء الأولوية لترقيع خوادم WebLogic المكشوفة على الإنترنت نظراً للاستغلال النشط.
Affected products
- Oracle WebLogic Server: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0
References
- http://packetstormsecurity.com/files/160143/Oracle-WebLogic-Server-Administration-Console-Handle-Remote-Code-Execution.html
- https://www.oracle.com/security-alerts/alert-cve-2020-14750.html
- http://packetstormsecurity.com/files/160143/Oracle-WebLogic-Server-Administration-Console-Handle-Remote-Code-Execution.html
- https://www.oracle.com/security-alerts/alert-cve-2020-14750.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-14750
Get alerted when CVE-2020-14750 or the next vulnerability affects your stack