CVE-2020-14750

Oracle WebLogic Server Remote Code Execution Vulnerability

9.8
CVSS 3.1
99.3 %
EPSS (current)
2021-11-03
KEV addition
No
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Oracle / WebLogic Server

Published: 2020-11-02 · Due (CISA): 2022-05-03

CWE: – · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
nucleihttp/cves/2020/CVE-2020-14750.yamlOracle WebLogic Server - Remote Command Execution–
metasploitexploit/multi/http/weblogic_admin_handle_rceexploit/multi/http/weblogic_admin_handle_rce2020-10-20

References only — no downloads or instructions.

Sources