CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-10-21
Oracle WebLogic Server Console Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2020-14883)
[Affected Scope] Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0
[Impact] Unauthenticated or high-privileged network attackers can bypass authentication via HTTP to execute arbitrary code and take over the server
[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately and restrict external access to the administration console