Actively exploited in the wild

Oracle WebLogic Server Remote Code Execution Vulnerability

Oracle - WebLogic Server · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2020-14750

CriticalCVSS 9.8KEV

Published: 02/11/2020(UTC)Updated: 17/06/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Summary

Vulnerability in the Oracle WebLogic Server Console (Oracle Fusion Middleware) affecting versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker with network access via HTTP can easily exploit it and take over the server.

Risk Assessment

The ability for an unauthenticated attacker to fully take over a WebLogic server is a critical risk to the confidentiality, integrity and availability of applications and business data.

Recommendation

Immediately apply the available Oracle patches for WebLogic Server and restrict network access to the administrative console. Consider temporarily disabling or isolating the console until updates are deployed.

Other vulnerabilities in Oracle WebLogic Server

See all

Original NVD description (English source)

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS