CVE-2020-14883 — Oracle WebLogic Server Unspecified Vulnerability

provenance: imported · CVE: CVE-2020-14883

CVE-2020-14883: Oracle WebLogic Server Unspecified Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Oracle
Product	WebLogic Server
Date added	2021-11-03
Due date	2022-05-03
Ransomware campaign use	Unknown

Description

Oracle WebLogic Server contains an unspecified vulnerability in the Console component with high impacts to confidentilaity, integrity, and availability.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-14883

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-14883
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog