⚠ Actively exploited
Added to CISA KEV on 2023-11-16. Federal agencies required to patch by 2023-12-07. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable..

CVE-2020-2551 — Corporation Weblogic Server vulnerability

15 documents11 sources
Severity
9.8CRITICALNVD
EPSS
94.4%
top 0.02%
CISA KEV
KEV
Added 2023-11-16
Due 2023-12-07
Exploit
Exploited in wild
Active exploitation observed
Affected products
2
Oracle Corporation Weblogic ServerOracle Weblogic Server
Timeline
PublishedJan 15
KEV addedNov 16
KEV dueDec 7
Latest updateMar 30
CISA Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability im…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDoracle/weblogic_server4 versions+3
▶CVEListV5oracle_corporation/weblogic_server4 versions+3

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-85qx-3cmc-hcq4: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components)↗2022-05-24
▶
CVEList
CVE-2020-2551: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components)↗2020-01-15
▶
VulnCheck
Oracle Fusion Middleware Unspecified Vulnerability↗2020
▶

💥Exploits & PoCs

1
Nuclei
Oracle WebLogic Server - Remote Code Execution
▶

🔍Detection Rules

4
Suricata
ET INFO Oracle T3 Response with CVE-2020-2551 Vulnerable Version (10.3.6)↗2020-05-08
▶
Suricata
ET EXPLOIT Possible Oracle WebLogic CVE-2020-2551 Scanning↗2020-05-08
▶
Suricata
ET INFO Oracle T3 Response with CVE-2020-2551 Vulnerable Version (12.1.3)↗2020-05-08
▶
Suricata
ET INFO Oracle T3 Response with CVE-2020-2551 Vulnerable Version (12.2.1)↗2020-05-08
▶

📋Vendor Advisories

2
CISA
Oracle Fusion Middleware Unspecified Vulnerability↗2023-11-16
▶
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: WLS Core Components — CVE-2020-2551↗2020-01-15
▶

🕵️Threat Intelligence

4
Hackernews
⚡ Weekly Recap: Telecom Sleeper Cells, LLM Jailbreaks, Apple Forces U.K. Age Checks and More↗2026-03-30
▶
Tenable
CVE-2026-21992: Critical Out-of-Band Oracle Identity Manager and Oracle Web Services Manager Remote Code Execution Vulnerability↗2026-03-20
▶
Bleepingcomputer
CISA warns of actively exploited Windows, Sophos, and Oracle bugs↗2023-11-17
▶
Tenable
Oracle January 2020 Critical Patch Update Contains 255 CVEs↗2020-01-15
▶
CVE-2020-2551 — CRITICAL severity | cvebase