The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to gain full control over the application.

Vulnerability in Oracle WebLogic core component with weak access control enables control via networking.

Reporter	Title	Published	Views	Family All 16
CBLMariner	CVE-2020-2801 affecting package openjdk8 1.8.0.332-1	12 Jan 202509:15	–	cbl_mariner
Circl	CVE-2020-2801	13 Mar 202322:21	–	circl
CNVD	Oracle Fusion Middleware WebLogic Server Remote Code Execution Vulnerability	16 Apr 202000:00	–	cnvd
Check Point Advisories	Oracle Fusion Middleware WebLogic Server Insecure Deserialization (CVE-2020-2883; CVE-2020-2546; CVE-2020-2798; CVE-2020-2801; CVE-2020-2884)	4 May 202000:00	–	checkpoint_advisories
CVE	CVE-2020-2801	15 Apr 202013:29	–	cve
Cvelist	CVE-2020-2801	15 Apr 202013:29	–	cvelist
EUVD	EUVD-2020-22594	7 Oct 202500:30	–	euvd
Microsoft CVE	Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. Note: The patch for this issue will address the vulnerability only if the WLS instance is using JDK 1.7.0_191 or later, or JDK 1.8.0_181 or later. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).	2 Oct 202506:11	–	mscve
NVD	CVE-2020-2801	15 Apr 202014:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2020	14 Apr 202000:00	–	oracle