CVE-2020-14882: Oracle WebLogic Server Remote Code Execution Vulnerability

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: yes — in CISA KEV since 2021-11-03
EPSS: 100.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-10-21 · updated 2026-06-17

Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Summary

CVE-2020-14882 is a critical remote code execution flaw in the Oracle WebLogic Server Console component that lets an unauthenticated attacker with HTTP network access take over the server. It affects versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0, with a CVSS score of 9.8. The vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog with active exploitation, a public exploit exists, and EPSS estimates a 100% probability of exploitation within 30 days. Apply the updates specified in Oracle's vendor instructions immediately, and restrict or monitor HTTP access to the WebLogic Console as a mitigation.

تُعد CVE-2020-14882 ثغرة حرجة لتنفيذ التعليمات البرمجية عن بُعد في مكوّن Console ضمن Oracle WebLogic Server، وتتيح لمهاجم غير مصادَق لديه وصول شبكي عبر HTTP السيطرة الكاملة على الخادم. تشمل الإصدارات المتأثرة 10.3.6.0.0 و12.1.3.0.0 و12.2.1.3.0 و12.2.1.4.0 و14.1.1.0.0، بدرجة CVSS تبلغ 9.8. الثغرة مدرجة في كتالوج CISA للثغرات المعروفة بالاستغلال مع استغلال نشط، ويتوفر استغلال عام، وتقدّر EPSS احتمال الاستغلال خلال 30 يوماً بنسبة 100%. طبّق التحديثات الواردة في تعليمات Oracle فوراً، وقيّد الوصول عبر HTTP إلى WebLogic Console أو راقبه كإجراء تخفيفي.

Affected products

Oracle WebLogic Server: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0

References

Get alerted when CVE-2020-14882 or the next vulnerability affects your stack